Virus Warning from Information Technology Services
A new variation of the Sobig worm started making it's presence known on campus yesterday, August 19th. The worm known as W32.Sobig.F@mm is mass-mailing and emails itself to all the email addresses in the address book of an infected computer except for one. It uses that one address in the from line of the email.
The subject is typically one of the following:
Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details
The content of the body of the email is similar to the following:
See the attached file for details
Please see the attached file for details.
The email comes with an attachment and usually follows the naming convention listed below. The extension listed here is .*, but can be .zip, .pif, .scr, etc
your_document.*
document_all.*
thank_you.*
your_details.*
details.*
document_9446.*
application.*
wicked_scr.*
movie0045.*
Do not open the attachment. You can safely delete the email and not become infected. Antigen (virus protection software) on the ITS Exchange server removes the virus and on the ITS server the attachments are stripped. IF you read email using other providers, the attachment may not have been removed.
If you feel that you do have the virus on your machine or would like more information about the virus you can go to the information and removal page at
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html
or
contact the helpdesk at 442-3700 or iHelp@albany.edu
|
