Alerts

5/25/2005  5:30 pm

################ GLOBAL TICKET #################

Department:   Sysadmin
Description:  German spam is the result of a virus

Ticket Detail:
We have been getting quite a few queries about email accounts being flooded with german spam.  It is a virus called Sober which is generating these emails from infected systems around the world.  If you or your customers are getting a lot of these emails it is likely that one of their systems may be infected with this virus or one of their friend's systems (who has their address in their addressbook) is infected.

The virus itself is not spread via an attachment in email so the virus scanner does not catch it.  The spam filter however does catch the emails if it is set to a setting of high. 

For more information visit: http://vil.nai.com/vil/content/v_133684.htm

For customers wishing a solution, we recommend:
a)  They update their virus program to the latest virus definitions.
b)  They enable the spam filter (if available) and set the level to High.
################################################

5/3/2004  9:00 am

Sasser Worm

The Sasser Worm can infect your machine through a security hole in Windows XP or Windows 2000.  You do not need to open an email message to get this and one of the most obvious symptoms is your computer shutting down abnormally.

You can read more about this at several locations on the web including http://www.eweek.com/article2/0,1759,1582536,00.asp. 

Microsoft has even more information including a download of the patch for their operating system and a fix for the worm.  See this at https://www.microsoft.com/security/incident/sasser.asp

For a very complete description as well as a link to a fix program, check out Symantec (publishers of Norton Antivirus) at their Antivirus Center http://www.symantec.com/avcenter/

If you are not able to download files, you may come into the store where we can give you one on a floppy disk for a little less than $5.

4/28/2004  9:00 pm

Virus Warning!

*******************
Warning!

posted 04/28/04
*******************

Someone is sending out viruses and attempting to make it look like it is coming from legitimate locations, including Quidnunc (others include Comcast, University of Washington, US Air Force and Rocksport!).

The first and most important thing
We do not send attachments!

If you receive any email from (anyone)@quidnunc.net that has a file attachment, delete it.

I have seen two messages so far.

One advises you that our server has detected viruses being sent from your mailbox. It then instructs you to click on the attachment to use our free anti-virus tool. They even provide a "password" and include a link to our website to make it look more legitimate.

The other says that our mail server will be down for two days and to click on the attachment to enable a mail-forwarding tool.

Return addresses for the above were noreply@quidnunc.net and staff@quidnunc.net (neither of which exist on our server).

Similar emails have appeared from comcast.net, u.washington.edu and even  usafa.af.mil (US Air Force)

*******************
Again-we do not mail unsolicited attachments! Never!!

*******************