This is a warning about a new virus/worm
being spread that appears to come from
random faked email addresses such as
administration@sau.edu or noreply@sau.edu.
The virus infects computers with Windows
operating systems. Non-Windows operating
systems, such as the Macintosh OS, cannot be
infected.
This email virus includes an
encrypted attachment that requires a user to
enter a password provided in the email.
Please do not click on the encrypted
attachment and enter the password, as you
will become a transmitter of the worm by
doing so.
As a rule, you should never open up
attachments that are suspect (even if they
are from an E-mail address that you know),
especially those that require you to enter
in a password. Also, if an E-mail instructs
you to delete any files from your computer,
please contact IT Services before doing so.
An example of the virus email is provided
below:
----------------------------------------------------------------------------------------
If the message will not be displayed
automatically, follow the link to read the
delivered message.
Received message is available at:
www.sau.edu/inbox/<your
username>/read.php?sessionid-6662
----------------------------------------------------------------------------------------
or
----------------------------------------------------------------------------------------
Dear user of sau.edu,
Some of our clients complained about the
spam (negative e-mail content) outgoing from
your e-mail account. Probably, you have been
infected by a proxy-relay trojan server. In
order to keep your computer safe, follow the
instructions.
For details see the attach.
Attached file protected with the password
for security reasons.
Password is
64005.
Best wishes,
The sau.edu team http://www.sau.edu
----------------------------------------------------------------------------------------
You can recognize the worm with the
various Subjects and Text listed below.
- E-mail account security warning.
- Notify about using the e-mail
account.
- Warning about your e-mail account.
- Important notify about your e-mail
account.
- Email account utilization warning.
- Notify about your e-mail account
utilization.
- E-mail account disabling warning.
Body
- Your e-mail account has been
temporary disabled because of
unauthorized access
- Our main mailing server will be
temporary unavailable for next two days,
to continue receiving mail in these days
you have to configure our free
auto-forwarding service.
- Your e-mail account will be disabled
because of improper using in next three
days, if you are still wishing to use
it, please, resign your account
information.
- We warn you about some attacks on
your e-mail account. Your computer may
contain viruses, in order to keep your
computer and e-mail account safe,
please, follow the instructions.
- Our antivirus software has detected
a large amount of viruses outgoing from
your email account, you may use our free
anti-virus tool to clean up your
computer software.
- Some of our clients complained about
the spam (negative e-mail content)
outgoing from your e-mail account.
Probably, you have been infected by a
proxy-relay trojan server. In order to
keep your computer safe, follow the
instructions.
As a rule, you should never open up
attachments that are suspect, especially
those that require you to enter in a
password.
