Note: To protect the privacy of our members, e-mail addresses have been removed from the archived messages. As a result, some links may be broken.
Find Lesson Plans on getty.edu! GettyGames

Re: [teacherartexchange] new worm warning

---------

From: Kathy Hughes (kchughes55_at_TeacherArtExchange)
Date: Wed May 04 2005 - 03:26:46 PDT

I've been getting them in my bulk mail and luckily deleted all of them, but they keep coming.

Maggie White <mwhiteaz@cybertrails.com> wrote:Hi, all,
 
It seems it's been a blessedly long time since I've received notice about a worm or virus and passed it on to you. Of course, this streak of good luck had to end, so here is a new warning from a reputable online newsletter.
 
Maggie
==============================================

A new Worm has been discovered today (May 2, 2005) named W32.Sober and it’s spreading rapidly! This mass-mailing worm circulates via email using its own SMTP engine to spread and may be in English or German.

 

Look for the following subject lines, message bodies and attachment names, which are indicative of this worm:

 

Subject Line: (One of the following)

      Re:Your Password
      Re:Registration Confirmation
      Re:Your email was blocked
      Re:mailing error
      Re: [blank]

Message Body: (One of the following)

      ok ok ok,,,,, here is it
      Account and Password Information are attached!
Visit: http:/ /www.[random domain]
      This is an automatically generated E-Mail Delivery Status Notification.
Mail-Header, Mail-Body and Error Description are attached

Appends one of the following randomly to the bottom of the message:
      Attachment-Scanner: Status OK
      AntiVirus: No Virus found
      Server-AntiVirus: No Virus (Clean)
      http:/ / www.[random domain]

 

Attachment: (One of the following)

 

      our_secret.zip
      mail_info.zip
      error-mail_info.zip
      account_info.zip
      account_info-text.zip

FOR THE TECHNICALLY INCLINED:
If you have a system that is already infected by this worm, then follow the manual removal instructions here:

http://www.sarc.com/avcenter/venc/data/w32.sober.o@mm.html#removalinstructions

 

For optimal security it is suggested that you update your anti-virus software. You can get more technical information about this outbreak & removal instructions at:

http://www.sarc.com/avcenter/venc/data/w32.sober.o@mm.html

 

FOR THOSE NOT TECHNICALLY INCLINED:
Contact your nearest Data Doctors location for service:
http://datadoctors.com/contact/

---
To unsubscribe go to
http://www.getty.edu/education/teacherartexchange/unsubscribe.html

                
---------------------------------
Do you Yahoo!?
 Yahoo! Mail - You care about security. So do we. 

---
To unsubscribe go to 
http://www.getty.edu/education/teacherartexchange/unsubscribe.html