Virus Alert: W32.Beagle.A@mm
Also known as:
I-Worm.Bagle [Kaspersky], WORM_BAGLE.A [Trend], W32/Bagle-A [Sophos], W32/Bagle@MM [McAfee], Win32.Bagle.A [Computer Associates]
A new virus, claiming to come from "administration@albany.edu", is spreading across campus. The e-mail will contain an attachment that, when opened, will infect your machine and may allow hackers to have full remote control of your workstation. It then will start sending copies of itself to e-mail addresses stored on your computer. The attachment may be a password protected ZIP (or any other type) file with the password contained in the body of the e-mail.
More information about this virus can be found at: Symantec
Virus Details
The sender of the message may appear to be one of the following:- administrator@albany.edu
- support@ albany.edu
- noreply@ albany.edu
- staff@ albany.edu
The subject will be one of the following:
- E-mail account security warning.
- Notify about using the e-mail account.
- Warning about your e-mail account.
- Important notify about your e-mail account.
- Email account utilization warning.
- Notify about your e-mail account utilization.
- E-mail account disabling warning.
An example of the e-mail body:
Dear user, the management of Albany.edu mailing system wants to let you know that, Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions. Advanced details can be found in attached file. Attached file protected with the password for security reasons. Password is xxxxx Cheers, The Albany.edu team http://www.albany.edu
Users are reminded NEVER to open e-mail attachments unless you are expecting them and can verify who they are from. Virus protection does not always detect brand new viruses, and opening attachments will infect your machine even if your virus scanning software is up-to-date. University at Albany ITS does not send out virus removal tools, virus updates or security updates via e-mail attachments. Always follow these virus prevention tips: Symantec
The SUNY Symantec server is updated continuously to detect and clean/quarantine viruses. If you suspect your computer may have inadvertently become infected, the link to the removal tool is listed below.
|
