W32.Novarg.A@mm goes wild
W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip. The worm also contains functionality to perform as a proxy server. It listens on all TCP ports in the range 3127-3198.
http://securityresponse.symantec.com/avcenter /venc/data/w32.novarg.a@mm.html#threatassessment