Virus Advisory: January 2004

Virus/Worm: W32.novarg.a@mm

A new mass-emailing worm called W32.novarg.A@mm has been discovered on campus.

Windows computers can become infected if users open the email attachment carried by this worm, which can have any of the following extensions: .bat, .cmd, .exe, .pif, .scr, or .zip. Users on the KaZaA file sharing network can also be attacked.

Some symptoms of infection:
- Detection by Symantec Antivirus
- Receipt of SPAM complaints against University IP addresses

Update your Symantec AntiVirus definitions immediately and do not open email with unexpected attachments and suspicious subjects, even if you know the sender.

If you think you may be infected with Novarg.A, a removal tool is available at http://www.symantec.com/avcenter/venc/data/w32.novarg.a@mm.removal.tool.html

Contact the Help Desk at 863-HELP to report an infection or for assistance with Novarg.A removal.

Virus/Worm - W32.Beagle.A@mm

W32.Beagle.A@mm is a mass-mailing worm that spreads by sending email with the same domain name as the recipient ("@brown.edu").

The Help Desk has reported this worm's presence on campus.

The email can be identified by the subject "Hi" and carries a randomly labeled attachment with a ".exe" extension (i.e., "random.exe").

Do not execute this attachment.