Havasu Doug
Pisces
HDF Gold Supporter
Delta Tau Chi - ΔTX
  
North Padre Island, Texas
Posts: 12,188
APPD 1.50
Post Rank: 7
'78 Challenger jet
|
 |
Posted: Jan. 30 2004,9:12 am |
Post # 9 |
   |
More info:
| Quote | January 27, 2004
"The Mydoom worm surfaced Monday and has been given several names by anti-virus software vendors, including Mydoom, Novarg and Mimail.R. Experts don't all agree on the worm's payload, but they do agree that it is spreading faster than Sobig-F, the worm that topped the charts for the most widespread e-mail worm last year."
(IDG News Service, a Network World affiliate, 1/27/04)
"Network Associates' Vincent Gullotto, vice president of the Anti-Virus Emergency Response Team (AVERT) expects the worm to keep causing headaches for a while."...It has a full head of steam, there are hundreds of thousands of e-mails, and we may see well into the millions (of e-mails), and possibly hundreds of thousands of machines infected."
(IDG News Service, a Network World affiliate, 1/27/04)
HOW DOES THE MYDOOM THREAT AFFECT ME?
-- Mydoom is a destructive worm that propagates through generating SMTP email as an attachment within an email. It disrupts business by:
   -- Creating a flood of email traffic
   -- Overloading email servers
   -- Degrading network response times  Â
-- The Mydoom worm infects Microsoft® Windows®9x/ME, NT4, 2000, 2003, and XP-based computers.
WHAT STEPS CAN I TAKE AGAINST MYDOOM?
-- If You Are Currently A McAfee Security Customer:
-- Download an immediate cure for this virus online at the
Network Associates McAfee AVERT website at: Â
-- Click on "4319 Minimum DAT" to update your anti-virus software
-- If You Are Not Currently a McAfee Security Customer:
-- Download our FREE virus utility tool, Stinger, that detects,
 cleans, and repairs systems infected by Mydoom. Go to: Â
ATTEND OUR FREE WEBCAST--LEARN HOW TO PROTECT YOUR SYSTEMS FROM A MYDOOM ATTACK:
-- 11:00AM PST on January 28, 2004
-- Register now at:
-- After you register, you will receive a confirmation email that contains the telephone number and URL to attend the webcast.
THE MCAFEE®SECURITY PROTECTION-IN-DEPTH™ STRATEGY DELIVERS SOLUTIONS TODAY THAT CAN MITIGATE THE RISKS ASSOCIATED WITH THIS WORM:
**SYSTEM PROTECTION SOLUTIONS**
McAfee Entercept
McAfee Entercept would detect the worm attempting to write itself into a system folder (%windir%). Â In addition, it would also detect that the worm is attempting to write entries within the 'RUN' key in the system registry and would therefore prevent infection occurring.
McAfee Desktop Firewall
To prevent possible remote access McAfee Desktop Firewall users can block incoming TCP port 3127.
McAfee ThreatScan
The latest ThreatScan signature (2004-01-27) includes detection of the Mydoom virus. This signature is available for ThreatScan v2.0, v2.1, and v2.5. ThreatScan users can also detect the backdoor portion of the virus by running a "Resource Discovery" task utilizing the port scanning options.
McAfee Anti-virus:
The 4319 DAT files are available now. EXTRA.DAT packages are also available on the VIL page.
**NETWORK PROTECTION SOLUTIONS**
Sniffer® Technologies
Sniffer filters are currently being investigated for Sniffer Portable, Sniffer Distributed, and Netasystâ„¢ Network Analyzer. Stay tuned to the VIL page for updates.
InfiniStream â„¢ Security Forensics
If you have InfiniStream in place, you can use it to reconstruct detailed network events, including: the opening of a suspicious attachment, a conversation between a client and server resulting in missing log files, database breaches, and limitless other possibilities.
McAfee IntruShield ®
McAfee IntruShield signatures have also been updated to prevent the worm from traveling across infected networks.
Expert Services
If a customer needs help cleaning-up, Network Associates® Expert Services can take away the pain of dealing with the threat - and help secure your customer's network from future threats.
**THE MCAFEE PROTECTION-IN-DEPTH STRATEGY**
The McAfee Protection-in-Depth Strategy delivers the industry's only complete set of system and network protection solutions differentiated by intrusion prevention technology that can detect and block attempts to exploit this worm before it can cause damage to systems and networks.
Best Regards,
Network Associates |
|
3-12-2025 Three Word Post.....The Next Generation.... (Rep.#19,658) from: BigDog
They are supposed to do a virus sweep this afternoon, so I guess no internet for me. 
(the system will be running too slow) 
