|
|
Important News about the Novarg virus | |
The W32.Novarg.A@mm virus is a mass-mailing worm that is very active on the Internet. While firms are currently taking measures to protect their Email users, you can protect yourself by identifying and deleting emails with Novarg characteristics. Please do not report these emails as Spam.
Note: Your computer should not be infected by this virus unless you open a corrupted attachment.
What to look for:
Emails infected with the Novarg virus have, thus far, been approximately 30-35KB in size and have exhibited the following characteristics:
Subject line:
Hello
Hi
Test
Status
From line:
Contains spoofed addresses - which means that the name that appears in the "From" field is probably not the real sender.
Body:
Tends to be unreadable; gibberish. You may also see the following message: "The message contains Unicode characters and has been sent as a binary attachment".
Attachment file extensions:
.zip (most common)
.bat
.cmd
.exe
.pif
.scr
Known attachment file names:
body (.zip, .bat, etc.)
readme
file
message
text
jasrjx
dajtl
document
What you can do:
Delete messages with the above characteristics and be sure to delete them from your Trash Folder. Knowing some of the above characteristics about this virus, you may wish to set up custom filters and route most of these virus emails directly to your Trash or Bulk Folder. This way, you can keep your inbox free of most of these messages. Just be sure to check your Trash or Bulk Folder and empty them on a regular basis in order to free up space in your email account.
For more information: Symantec Novarg Recommendations | |
|
