Print

Print


Same virus

W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend],
Worm.SCO.A [ClamAV], W32.Novarg.A@mm [Symantec]

Also note, if you find this infecting systems on
campus, clean them quickly, it opens a proxy the
port range of 3127 through 3198.

Hope this helps.

-Russell

Ed Symanzik wrote:

> It sounds like you're talking about Worm.SCO.A.  We blocked our first
> one at 5:36pm yesterday and a total of 261955 before midnight.
>
> It sounds like there is another one called MyDoom out there as well.  If
> someone would send me a copy, we can try making our own signature.
>
> --
> Ed Symanzik
> Mail Team
> [log in to unmask]
>
> .
>