Virus Alert
Dear Internet Customer
We are sending this Virus Alert to update you on two critical viruses that are circulating on the Internet:
The SASSER Virus and the NETSKY Virus.
SASSER VIRUS INFORMATION (NETSKY VIRUS INFORMATION IS BELOW)
A. SASSER KEY MESSAGE:
All customers using Windows 2000 or Windows XP should immediately run Windows Update at
http://windowsupdate.microsoft.com
B. SASSER VIRUS OVERVIEW:
This virus is spreading rapidly across the Internet. Unlike viruses sent via Email attachments, this 'worm' virus can infect computers by taking advantage of a security vulnerability in Windows 2000 and Windows XP. It can be spread from computer to computer with no user intervention.
C. SASSER - SYMPTOMS OF INFECTION:
If your computer has been infected, the SASSER virus will cause your computer to frequently restart. While your computer is rebooting, you may also see pop-up systems messages regarding "NT Authority\System" or "LSA Shell". Your computer will attempt to infect other computers without your knowledge.
D. SASSER - HOW TO KEEP YOUR COMPUTER FROM BEING INFECTED
1. Run Windows Update:
All customers using Windows 2000 and Windows XP users should run Windows Update at
http://windowsupdate.microsoft.com and follow the on-screen instructions to patch their systems and avoid infection.
2. Update your virus protection software:
If you already have virus protection software installed on your computer, you should update it immediately. If you do not have virus protection software installed on your computer, Rogers, in conjunction with McAfee, is offering an Internet Security Solution which includes virus protection. You can get more information from:
http://www.rogers.com/mcafee
E. SASSER - HOW TO REMOVE IT IF YOU THINK YOUR COMPUTER HAS BEEN INFECTED
1. Download and run McAfee's Free Virus Removal Tool - Stinger
If you believe that your computer has been infected, McAfee has released a stand-alone virus removal tool which can detect and can remove this virus. Their free 'Stinger' virus removal tool can be downloaded from their Website:
http://vil.nai.com/vil/stinger/
NOTE: Stinger can only remove the virus, it does not protect your computer from future infection by this virus or any other virus. For more details on Virus Protection offered by Rogers and McAfee please visit
http://www.rogers.com/mcafee
2. Run Windows Update:
After removing the virus, you should install the Microsoft update to be protected from the SASSER virus:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
3. Update your virus protection software:
If you already have virus protection software installed on your computer, you should update it immediately. If you do not have virus protection software installed on your computer, Rogers, in conjunction with McAfee, is offering an Internet Security Solution which includes virus protection. You can get more information from:
http://www.rogers.com/mcafee
F. SASSER - ADDITIONAL DETAILS
To get additional details on the SASSER Virus, please visit:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125008
------------------------------------------------------------
NETSKY VIRUS INFORMATION (SASSER VIRUS INFORMATION IS ABOVE)
A. NETSKY KEY MESSAGE:
Customers should be very cautious when opening Email attachments. We recommend using an updated Virus Protection software package to avoid being infected by this or other viruses. If you receive an infected Email message, immediately delete it and empty your Deleted Items folder.
B. NETSKY VIRUS OVERVIEW:
This virus arrives as an infected Email attachment and can infect your computer if the attachment is opened. The virus affects computers running Windows Operating Systems. Once infected, your computer can send out infected Email messages (without your knowledge) to others within your Email address book.
The name of the infected attachment, body of the Email message and the From: line all vary greatly (See below).
TYPICAL SUBJECT LINES FOR EMAIL MESSAGES INFECTED WITH THE NETSKY VIRUS:
- Correction
- Hurts
- Privacy
- Password
- Wow
- Criminal
- Pictures
- Text
- Money
- Stolen
- Found
- Numbers
- Funny
- Only
- love?
- More
- samples
- Picture
- Letter
- Question
- Illegal
TYPICAL BODY TEXT OF EMAIL MESSAGES INFECTED WITH THE NETSKY VIRUS:
- Please use the font arial!
- How can I help you?
- Still?
- I've your password.
- Take it easy!
- Why do you show your body?
- Hey, are you criminal?
- Your pictures are good!
- The text you sent to me is not so good!
- True love letter?
- Do you have no money?
- Do you have asked me?
- I've found your creditcard.
- Check the data!
- Are your numbers correct?
- You have no chance...
- Wow! Why are you so shy?
- Do you have more samples?
- Do you have more photos about you?
- Do you have written the letter?
- Does it hurt you?
- Please do not sent me your illegal stuff again!!!
TYPICAL EMAIL ATTACHMENT NAMES INFECTED WITH THE NETSKY VIRUS:
- corrected_doc.pif
- hurts.pif
- document1.pif
- passwords02.pif
- image034.pif
- myabuselist.pif
- your_picture01.pif
- your_text01.pif
- your_letter.pif
- your_bill.pif
- my_stolen_document.pif
- visa_data.pif
- pin_tel.pif
- your_text.pif
- loveletter02.pif
- all_pictures.pif
- your_letter_03.pif
- your_picture.pif
- abuses.pif
C. NETSKY - SYMPTOMS OF INFECTION:
Your computer can only be infected with the NETSKY virus if you opened one of the attachments detailed above. Once infected, your computer will begin sending out copies of the virus Email message without your knowledge, so it is difficult to detect.
D. NETSKY - HOW TO KEEP YOUR COMPUTER FROM BEING INFECTED
1. Delete infected messages and empty your Deleted Items folder.
2. Update your Virus Protection software:
If you already have virus protection software installed on your computer, you should update it immediately. If you do not have virus protection software installed on your computer, Rogers, in conjunction with McAfee, is offering an Internet Security Solution which includes virus protection. You can get more information from:
http://www.rogers.com/mcafee
E. NETSKY - HOW TO REMOVE IT IF YOU THINK YOUR COMPUTER HAS BEEN INFECTED
1. Download and run McAfee's Free Virus Removal Tool - Stinger
If you believe that your computer has been infected, McAfee has released a stand-alone virus removal tool which can detect and remove this virus. Their free 'Stinger' virus removal tool can be downloaded from their Website:
http://vil.nai.com/vil/stinger/
NOTE: Stinger can only remove the virus, it does not protect your computer from future infection by this virus or any other virus. For more details on Virus Protection offered by Rogers and McAfee please visit
http://www.rogers.com/mcafee
2. Update your virus protection software:
If you already have virus protection software installed on your computer, you should update it immediately. If you do not have virus protection software installed on your computer, Rogers, in conjunction with McAfee, is offering an Internet Security Solution which includes virus protection. You can get more information from:
http://www.rogers.com/mcafee
F. NETSKY - ADDITIONAL DETAILS
To get additional details on the NETSKY Virus, please visit:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=124873
Thank you.
