און היינט אינדערפרי האבן זיי דאס געשיקט
To our Jnet customers.
Please be aware that there is a current ongoing virus attack, which spreads by e-mail. This is a variant of the Sober virus, and may arrive in a few disguises.
Our staff is aware of this, and is doing its best to prevent infected mail from reaching you, however, you should be aware of the ways in which this infection spreads, so that you can protect yourself.
This virus will appear as an e-mail with one of the following subject lines:
Your Password
Registration Confirmation
smtp mail failed
Mail delivery failed
hi, ive a new mail address
You visit illegal websites
Your IP was logged
Other subject lines may also exist.
This mail arrives with an attached file, with a .zip ending. Do not open that file, it will infect your computer.
Although some of these messages may appear to arrive from important sources, such as the FBI, be assured that this is not so.
more information, and a tool for removing the virus, can be found at: http://www.symantec.com/avcenter/venc/data/w32.sober.x@mm.html
As always, please maintain safe e-mailing practices:
Do not open attachments from people you don't know.
Even if you do know the sender, if the attachment is unexpected, do not open it before verifying with the sender that they actually sent you the attachment.
Do not click links on e-mails asking you to verify account numbers or other personal information. instead, type the address shown into your browser, and verify the request is legitimate.
Sincerely,
The Jnet Tech Support Team
--------------------------------------------------------------------------------
Enclosed is an article from news.com regarding this latest virus threat:
Sober worm offshoot trades on FBI
By John Borland
Staff Writer, CNET News.com
Published: November 22, 2005, 12:37 PM PST
There is no Easter Bunny, nor is the FBI likely to be e-mailing you to ask you questions about visiting illegal Web sites.
A new variant of the Sober worm made the network rounds Tuesday, attempting to entice people into clicking on attachments purporting to be threats from the law enforcement agency or videos clips.
Antivirus companies said the worm gained some traction over the weekend and on Monday. It's a minor modification of the "Sober" virus that has flared up several times over the past year. But this latest variant, graded as a medium-level threat, appeared to be trailing off as security providers have responded.
"This one is virulent and will reproduce itself easily but does not have much of a payload," said David Perry, the global director of education at antivirus company Trend Micro. "For the time being, this particular strain is probably done."
Some antivirus companies said the worm was still spreading fast, however. In a blog posting, security company F-Secure said Internet companies have seen "several millions of infected emails" over the course of hours.
"The numbers we're now seeing...are just huge," wrote F-Secure Chief Research Officer Mikko Hypponen. "This is the largest email worm outbreak of the year, so far."
One version of the e-mail carrying the worm appears to be a letter from the FBI saying the agency has found evidence that the computer user has been visiting illegal Web sites. It asks the recipient to click on the attachment to answer questions.
The FBI released a warning on Tuesday saying it never sends unsolicited e-mails.
"The FBI takes this matter seriously and is investigating," the agency said in its statement. "Users are instructed to delete the e-mail without opening it."
Another version of the e-mail used a message purporting to be from the Central Intelligence Agency. A third, a German-language variant, contained a threatening message from a German law enforcement agency.
A separate version purports to offer a download manager for "video clips, pictures and more". All operate the same way, once the attachment is activated, however.
If activated, the worm drops several files onto a computer and searches for e-mail addresses stored in address books or elsewhere in memory and sends copies of itself to those destinations. If it finds Microsoft's anti-spyware and antivirus software running, it turns the protections off.
Several other variants of a different virus, dubbed "Mytob," are also making the rounds. The e-mails carrying them purport to be a message from an e-mail service provider or from support staff providing notification about a changed password or suspended account.
Antivirus companies rate the danger of this worm as "low," but as always, advise against clicking on unknown attachments to e-mails.
 |
|
|
