本文发表在 rolia.net 枫下论坛Dear Rogers Customer,
You may receive an Email message with an infected attachment. The name
of the virus is W32/Sobig@MM. The virus may disguise itself as a screen saver
file or other attachment type (generally ending with .scr or .pif. If the
attachment is opened, the virus can potentially make copies of itself and send
itself (without your knowledge) to everyone in your Email program's address
book.
A few of the infected Email messages appear to be coming from
bill@microsoft.com. Please be aware that this Email message IS NOT
coming from Microsoft. The virus can forge the 'From' Email account to
make it appear that it is coming from Microsoft.
IF YOU RECEIVE THIS EMAIL MESSAGE, DO NOT OPEN THE ATTACHMENT. DELETE THE EMAIL
IMMEDIATELY.
============================
Following are details on the Email message containing the virus:
============================
To: This message has been sent to numerous Email users all over the
Internet
Date Sent: (Varies)
From: Varies, usually someone who has you in their email address book.
Occasionally from bill@microsoft.com
Subject: May contain one of the following subject lines
(but not limited to):
- Re: Movie
- Re: Submited (004756-3463)
- Re: 45443-343556
- Re: Approved
- Approved
- Re: Your application
- Re: Application
Body of the Email Message:
The body of the Email message states:
"Please see the attached file."
Attachment Name: The infected attachment file may be one of the
following names (but not limited to):
- screensaver.scr
- movie.pif
- submited.pif
- 45443.pif
- documents.pif
- approved.pif
- application.pif
- document.pif
File Size of the Attachment: Approximately 59KB (may vary)
Details:
- The message will appear to come from someone who has you listed in
their address book (occasionally appears to come from
bill@microsoft.com).
- The virus will not infect your computer unless you have opened the
attachment.
============================
Steps for cleaning the W32/Sobig.c@MM Virus ============================
IF YOU HAVE OPENED THE INFECTED ATTACHMENT:
1. If you do not already own one, download an updated Anti-Virus
software package. These virus-scanning packages can be downloaded from:
McAffee (http://software.mcafee.com/centers/download/default.asp)
Norton Antivirus (http http://www.symantec.com/downloads/)
NOTE: Even if you own a virus scanning software package, it is very
important that you download the latest virus definition file so that
your software can clean this new virus.
2. Run your virus scanning software which will detect the
W32/Sobig.c@MM Virus and offer to clean it from your system. Select the
option that cleans it from your system.
3. Read through the steps in the Surf Safe section on our customer
support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/
UPDATE: Symantec Security Response has released a stand-alone tool
which can remove the virus from your computer if you do not have an
Anti-Virus Software package installed. The tool is available on
Symantec's Website: http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.c.removal.
tool.html
IF YOU HAVE RECEIVED THE EMAIL, BUT HAVE NOT OPENED THE INFECTED
ATTACHMENT:
1. Delete the Email Message.
2. Empty your deleted Email folder.
3. Update your existing Anti-Virus Software or purchase one of the
packages listed above.
4. Read through the steps in the Surf Safe section on our Customer
Support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/
Please note that although our Network Security team monitors viruses on
the Rogers network, we strongly recommend that you consistently scan
your Email attachments and downloaded files to protect your personal
computer, no matter how trusted the source. This advice applies to all Email
messages, not just the one discussed in this message.
Please rest assured that the Rogers Network Security Team will continue
to monitor the situation.
Thank you,
Rogers Network Security更多精彩文章及讨论，请光临枫下论坛 rolia.net
You may receive an Email message with an infected attachment. The name
of the virus is W32/Sobig@MM. The virus may disguise itself as a screen saver
file or other attachment type (generally ending with .scr or .pif. If the
attachment is opened, the virus can potentially make copies of itself and send
itself (without your knowledge) to everyone in your Email program's address
book.
A few of the infected Email messages appear to be coming from
bill@microsoft.com. Please be aware that this Email message IS NOT
coming from Microsoft. The virus can forge the 'From' Email account to
make it appear that it is coming from Microsoft.
IF YOU RECEIVE THIS EMAIL MESSAGE, DO NOT OPEN THE ATTACHMENT. DELETE THE EMAIL
IMMEDIATELY.
============================
Following are details on the Email message containing the virus:
============================
To: This message has been sent to numerous Email users all over the
Internet
Date Sent: (Varies)
From: Varies, usually someone who has you in their email address book.
Occasionally from bill@microsoft.com
Subject: May contain one of the following subject lines
(but not limited to):
- Re: Movie
- Re: Submited (004756-3463)
- Re: 45443-343556
- Re: Approved
- Approved
- Re: Your application
- Re: Application
Body of the Email Message:
The body of the Email message states:
"Please see the attached file."
Attachment Name: The infected attachment file may be one of the
following names (but not limited to):
- screensaver.scr
- movie.pif
- submited.pif
- 45443.pif
- documents.pif
- approved.pif
- application.pif
- document.pif
File Size of the Attachment: Approximately 59KB (may vary)
Details:
- The message will appear to come from someone who has you listed in
their address book (occasionally appears to come from
bill@microsoft.com).
- The virus will not infect your computer unless you have opened the
attachment.
============================
Steps for cleaning the W32/Sobig.c@MM Virus ============================
IF YOU HAVE OPENED THE INFECTED ATTACHMENT:
1. If you do not already own one, download an updated Anti-Virus
software package. These virus-scanning packages can be downloaded from:
McAffee (http://software.mcafee.com/centers/download/default.asp)
Norton Antivirus (http http://www.symantec.com/downloads/)
NOTE: Even if you own a virus scanning software package, it is very
important that you download the latest virus definition file so that
your software can clean this new virus.
2. Run your virus scanning software which will detect the
W32/Sobig.c@MM Virus and offer to clean it from your system. Select the
option that cleans it from your system.
3. Read through the steps in the Surf Safe section on our customer
support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/
UPDATE: Symantec Security Response has released a stand-alone tool
which can remove the virus from your computer if you do not have an
Anti-Virus Software package installed. The tool is available on
Symantec's Website: http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.c.removal.
tool.html
IF YOU HAVE RECEIVED THE EMAIL, BUT HAVE NOT OPENED THE INFECTED
ATTACHMENT:
1. Delete the Email Message.
2. Empty your deleted Email folder.
3. Update your existing Anti-Virus Software or purchase one of the
packages listed above.
4. Read through the steps in the Surf Safe section on our Customer
Support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/
Please note that although our Network Security team monitors viruses on
the Rogers network, we strongly recommend that you consistently scan
your Email attachments and downloaded files to protect your personal
computer, no matter how trusted the source. This advice applies to all Email
messages, not just the one discussed in this message.
Please rest assured that the Rogers Network Security Team will continue
to monitor the situation.
Thank you,
Rogers Network Security更多精彩文章及讨论，请光临枫下论坛 rolia.net