W32.Novarg.A@mm worm/virus/MyDoom

Send this link to a friend

There is a zip file or plain attachment doing the rounds at the moment that normally comes with the message: The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment; or Mail transaction failed. Partial message is available.

This is a mass-mailing worm which arrives with a .bat, .cmd, .exe, .pif, .scr, or .zip attachment.

This spam email is taking advantage of some AV protection not being able to detect zipped file infections. The email address of the sender is forged so don't bother trying to email them.

When a computer is infected, the Novarg/MyDoom worm will set up a backdoor into the system by opening TCP ports 3127 through 3198, which can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources.

In addition, the backdoor can download and execute arbitrary files.

The worm will perform a Denial of Service (DoS) starting on February 1, 2004. It also has a trigger date to stop spreading on February 12, 2004.

Click link below to directly download removal tool from the Symantec web site:

Removal tool