Re: virus warning

["Babar Kazmi" <BabarKazmi@Hotmail.Com>]

Dear

We all will know on 1st Feb as the trigger starts :)
Any how lets the keep the fingers crossed and hold tight the input policy ..

Regards

Babar Kazmi.

>
>In this case, we are protected !!!!!
>
>We are all using a firewall with netfilter and input policy drop
>
>:))))
>
>
>
>----- Original Message ----- 
>From: "Fritz Mesedilla"
>To: "Netfilter Mailing List (E-mail)"
>Sent: Tuesday, January 27, 2004 4:30 AM
>Subject: RE: virus warning
>
>
>
>I forgot to send the details.
>
>
>W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an
>attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip.
>
>When the machine gets infected, the worm will set up a backdoor into the
>system by opening TCP ports 3127 thru 3198. This will potentially allow a
>hacker to connect to the machine and utilize it as a proxy to gain access
to
>it's network resources. In addition, the backdoor has the ability to
>download and execute arbitrary files.
>
>The worm will perform a DoS starting on February 1, 2004. On February 12,
>2004 the worm has a trigger date to stop spreading.
>
>
>http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.htm
l
>
>
>
>Cheers,
>
>fritz
>--- 
>+ Basta Ikaw Lord
>
>
>
>
>-----Original Message----- 
>From:
>Sent: Tuesday, January 27, 2004 2:45 PM
>To: Netfilter Mailing List (E-mail)
>Subject: Re: virus warning
>
>
>
>Obviously this is a really new one ... F-prot didn't catch it .. and mines
>up to date ...
>However ... since kmail and linux don't much like 7 bit mime ... *grin*
>
>I'm handing this one up to the folks at F-Prot to see why they didn't catch
>it...
>
>
>Alistair.
>
>On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > friends,
> >
> > we got a virus in our list.
> > clamav warned me about it.
> > it's now spreading like fire even on other lists.
> >
> > thought you might like to be warned.
> >
> >
> > Cheers,
> >
> > fritz
> > --- 
> > + Basta Ikaw Lord
> >
> >
> >
> >
> > ---------------------------------------------------------------------- 
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the sender immediately by e-mail and delete this e-mail from your
> > system. Please note that any views or opinions presented in this
> > email are solely those of the author and do not necessarily represent
> > those of the company. Finally, the recipient should check this email
> > and any attachments for the presence of viruses. The company accepts
> > no liability for any damage caused by any virus transmitted by this
> > email.
> >
> > Overture Media, Inc.
> > Direct Line: (632) 635-4785
> > Trunkline:   (632) 631-8971 Local 146
> > Fax: (632) 637-2206
> > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> > Quezon City 1100
>
>
>---------------------------------------------------------------------- 
>This email and any files transmitted with it are confidential and
>intended solely for the use of the individual or entity to whom they
>are addressed. If you have received this email in error please notify
>the sender immediately by e-mail and delete this e-mail from your
>system. Please note that any views or opinions presented in this
>email are solely those of the author and do not necessarily represent
>those of the company. Finally, the recipient should check this email
>and any attachments for the presence of viruses. The company accepts
>no liability for any damage caused by any virus transmitted by this
>email.
>
>Overture Media, Inc.
>Direct Line: (632) 635-4785
>Trunkline:   (632) 631-8971 Local 146
>Fax: (632) 637-2206
>Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
>Quezon City 1100
>
>
>
>
>