Virus attachment sent to CHFA-TODAY mail list - Again! and AGAIN AND AGAIN!

Same worm as Saturday (W95.Hybris) - this time it came from a computer on campus. The entire technology community on campus was informed - but at 5:15pm it is unlikely to be tracked down until Wednesday morning.

DURING THAT TIME AND *ALWAYS* - if you receive a message with a blank subject line, from a blank sender - DELETE IT.

Information posted by Chris Conklin, 4/16/2002 5:19:54 PM.

Virus attachment sent to CHFA-TODAY mail list - Again!

4:50pm - Cedar Falls Utilities called to tell me that this customer's modem has been placed in receive only mode. They will no longer be able to send this worm to chfa-today.

Information posted by Chris Conklin, 4/13/2002 4:52:12 PM.

Virus attachment sent to CHFA-TODAY mail list - Again!

This is an old W95.Hybris.Worm attachment that Norton AntiVirus catches easily.

Anyone with a UNI email account in College of Humanities and Fine Arts has got an email (sent to: chfa-today@uni.edu) from a blank sender, with a blank subject line (8:53am and again at 1:10pm today Saturday 4/13). There is no body (text) in the message. A file attachment named FIGBFHFI.EXE is infected with this worm.

*DO NOT ATTEMPT TO RUN OR SAVE THIS ATTACHMENT*

You can simply delete this entire message. In Outlook Express select the message (click once on it in your list of inbox messages) - then click the red X icon in the center of the top toolbar. Netscape Communicator has a trash can icon across the toolbar - or with either program you can simply click the delete key on your keyboard.

If you are on campus, with a Windows machine - you should have a golden
shield in the lower right corner of your screen. This indicates Norton
AntiVirus Corporate Edition is installed and running on your machine. If
you do not see this logo, and are on a Dell or Gateway computer running
Windows please contact our help desk at 3-7349 or mailto:chfaTECH@uni.edu

Macintosh users - current versions of Norton AntiVirus for Mac will alert
you to this infection (if you try to launch the attachment), but this particular worm will only run on Windows based machines.

Cedar Falls Utilities has been notified by e-mail and voice mail that this message is coming from one of their cable-modem home users. Hopefully the Utilities will notify this user so they can clean their computer and prevent continued sending of this junk.


Information posted by Chris Conklin, 4/13/2002 4:24:43 PM.