Same virus W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend], Worm.SCO.A [ClamAV], W32.Novarg.A@mm [Symantec] Also note, if you find this infecting systems on campus, clean them quickly, it opens a proxy the port range of 3127 through 3198. Hope this helps. -Russell Ed Symanzik wrote: > It sounds like you're talking about Worm.SCO.A. We blocked our first > one at 5:36pm yesterday and a total of 261955 before midnight. > > It sounds like there is another one called MyDoom out there as well. If > someone would send me a copy, we can try making our own signature. > > -- > Ed Symanzik > Mail Team > [log in to unmask] > > . >