more about the freaking virus

Here's the e-mail the tech guy on my campus sent to everyone about this
new viruse. It just sounds like a really, really annoying virus and
that's it.

Jim

***

W32Sobig.F@mm is a fast moving worm that was spread widely through the
internet today (Tuesday, 8/19/2003). Some copies of the virus were
received via e-mail at Drew earlier this morning before updated virus
signatures were available. However, most infected messages were
detected by the virus scanning software on our e-mail server.

Please note that simply opening one of these email messages won't
normally infect your computer with the virus; you actually need to open
the attachment in the message in order to infect your computer. As
always, it is never a good idea to open an attachment sent to you via
email unless you know who sent the attachment and you are expecting an
attachment from that person.

You may have received an e-mail message indicating someone received an
e-mail message from you that was infected with the W32Sobig.F@mm virus.
This message is very likely a false alarm. The W32Sobig.F@mm virus
spreads to other computers by sending infected e-mail messages to
various e-mail addresses found on the infected computer. To cover its
tracks, it makes the e-mail message appear to come from a random e-mail
address also found on the infected computer. In some cases, that random
e-mail address is a @drew.edu address. If the infected e-mail message
is detected by a virus scanner, a message will be returned to the
apparent originator of the e-mail - in most cases a faked address.

We received many such false alarms today and this is, understandably,
causing confusion. In order to eliminate some of the false alarms, a
"webaccess" mail rule was added this evening to each account to remove
virus alert messages produced by our virus scanning software. This will
cut down on some of the false alarms, but not all of them. Do not be
overly alarmed if you receive an e-mail message suggesting that your
computer is infected with the W32Sobig.F@mm virus. It is prudent to
scan your computer for viruses using F-prot virus scanning software (on
campus) or any other virus scanning software on your computer.

For more information on the W32Sobig.F@mm virus, please see:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

http://www.datafellows.com/v-descs/sobig_f.shtml

-
* Unsubscribing? Mail majordomo@roughdraft.org with the message
* UNSUBSCRIBE BANANAFISH
Received on Mon Aug 25 09:42:01 2003