Page 1 of 3 123 LastLast
Results 1 to 10 of 28
  1. #1
    Billy T
    Guest

    Default What is "Worm.sco.a up to??

    Hi Team

    I was just doing a routine email dowload and No 1 son's Freenet account suddenly started downloading 58 emails. It usually has only 4 or 5 items of spam in there as he doesn't actually have access to it from his computer and never has. The spam dates back to the previous owner of the address who surfed not wisely but too well, straying into all sorts of nasty sites (hence the embargo on said-son using it.).

    I killed the download but not before I saw a message from cytanet.com.cy saying that they had rejected a virus apparently sent from his email address. The virus was worm.sco.a but I can't find it in my Norton AV definitions or on Google.

    Is it new?

    I am currently scanning the recipient computer for viruses just in case .

    Cheers

    Billy 8-{) :|

  2. #2
    Jim B
    Guest

    Default Re: What is "Worm.sco.a up to??

    W32.Novarg.A@mm [Norton]
    W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend]

  3. #3
    Billy T
    Guest

    Default Re: What is "Worm.sco.a up to??

    Ah so!

    Are they all the same virus?

    I hope the email address was spoofed then, but the AV is up to date on that box as of minutes before this started so we'll see if the scan picks up an infection.

    Cheers

    Billy 8-{)

  4. #4
    Hun Hunter Biggles's Avatar
    Join Date
    May 1988
    Location
    In the air
    Posts
    2,732

    Default Re: What is "Worm.sco.a up to??

    It's spreading pretty fast.

    Symantec's note on it

  5. #5
    Hun Hunter Biggles's Avatar
    Join Date
    May 1988
    Location
    In the air
    Posts
    2,732

    Default Re: What is "Worm.sco.a up to??

    And does infact be seem to be targeting SCO with a denial of service attack launched from infected PCs.

    New virus infects PCs, whacks SCO

  6. #6
    Billy T
    Guest

    Default Re: What is "Worm.sco.a up to??

    Okay, I'm light on virus experience, not having had an infection ever (crossed fingers as I type this), though I have intercepted about five prior to infection over the last seven or eight years. Nortons has just completed a full scan without finding anything and I have all mail scanned on download too.

    Can I assume that the use of my son's email address is a spoof, or should I keep looking for an infection in this particular box which is the only one I use to download email?

    Cheers

    Billy 8-{)

  7. #7
    metla
    Guest

    Default Re: What is "Worm.sco.a up to??

    Best use of a virus i have seen so far.


  8. #8
    Chilling_Silently
    Guest

    Default Re: What is "Worm.sco.a up to??

    > Best use of a virus i have seen so far.
    >

    Amen to that...
    I thought the MS.Blaster was a pretty cool idea too ;-)

  9. #9
    miknz
    Guest

    Default Re: What is "Worm.sco.a up to??

    I have had a heap bounced emails returned to me today infected with the above virus. This is strange because I have not sent any this afternoon and the home pc was off when the emails were returned. I ran avg and it picked up the WORM_MIMAIL.R. All the bounced emails have been stamped with the xtra email virus scanner but I cant see who they were sent to or whether they really came from me???

    anyone have any ideas on this ?

    mike

  10. #10
    miknz
    Guest

    Default Re: What is "Worm.sco.a up to??

    Just found that one of the emails returned to me has the following .dat file attached to it, can anyone decode this

    Reporting-MTA: dns; mail.budget.co.nz
    Arrival-Date: Tue, 27 Jan 2004 14:15:36 +1300 (NZDT)

    Final-Recipient: rfc822; lchoat@budget.co.nz
    Action: failed
    Status: 5.0.0
    Diagnostic-Code: X-Postfix; maildir delivery failed: create
    /home/lchoat/Maildir/tmp/1075172783.22772_15.mail.budget.co.nz: Permission
    denied



    cheers

Similar Threads

  1. unwated worm : WORM/Rbot.174080
    By WestMclaren2004 in forum PressF1
    Replies: 3
    Last Post: 12-03-2008, 09:01 AM
  2. Help- Worm!
    By summertime in forum PressF1
    Replies: 8
    Last Post: 03-07-2004, 02:01 AM
  3. Worm
    By leshibbard in forum PressF1
    Replies: 4
    Last Post: 06-04-2004, 02:05 PM
  4. the worm
    By starfish in forum PressF1
    Replies: 6
    Last Post: 15-08-2003, 01:31 PM
  5. Do I have a worm?
    By hamstar in forum PressF1
    Replies: 10
    Last Post: 04-07-2003, 12:14 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •