Prohozhyi
( )
04/06/2003 17:45:30
Re: Внимание! Новый Вирус!

Following are details on the Email message containing the virus: ============================
To: This message has been sent to numerous Email users all over the
Internet

Date Sent: (Varies)

From: Varies, usually someone who has you in their email address book.
Occasionally from bill@microsoft.com

Subject: May contain one of the following subject lines
(but not limited to):

- Re: Movie
- Re: Submited (004756-3463)
- Re: 45443-343556
- Re: Approved
- Approved
- Re: Your application
- Re: Application

Body of the Email Message:
The body of the Email message states:
"Please see the attached file."

Attachment Name: The infected attachment file may be one of the
following names (but not limited to):

- screensaver.scr
- movie.pif
- submited.pif
- 45443.pif
- documents.pif
- approved.pif
- application.pif
- document.pif

File Size of the Attachment: Approximately 59KB (may vary)

Details:

- The message will appear to come from someone who has you listed in
their address book (occasionally appears to come from
bill@microsoft.com).

- The virus will not infect your computer unless you have opened the
attachment.

============================
Steps for cleaning the W32/Sobig.c@MM Virus ============================

IF YOU HAVE OPENED THE INFECTED ATTACHMENT:

1. If you do not already own one, download an updated Anti-Virus
software package. These virus-scanning packages can be downloaded from:

McAffee (http://software.mcafee.com/centers/download/default.asp)
Norton Antivirus (http http://www.symantec.com/downloads/)

NOTE: Even if you own a virus scanning software package, it is very
important that you download the latest virus definition file so that
your software can clean this new virus.

2. Run your virus scanning software which will detect the
W32/Sobig.c@MM Virus and offer to clean it from your system. Select the
option that cleans it from your system.

3. Read through the steps in the Surf Safe section on our customer
support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/

UPDATE: Symantec Security Response has released a stand-alone tool
which can remove the virus from your computer if you do not have an
Anti-Virus Software package installed. The tool is available on
Symantec's Website: http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.c.removal.
tool.html

IF YOU HAVE RECEIVED THE EMAIL, BUT HAVE NOT OPENED THE INFECTED
ATTACHMENT:

1. Delete the Email Message.

2. Empty your deleted Email folder.

3. Update your existing Anti-Virus Software or purchase one of the
packages listed above.

4. Read through the steps in the Surf Safe section on our Customer
Support site to keep your computer safe. The Surf Safe section can be
found at: http://rogers.home.com/help/content/how/surf_safe/

Please note that although our Network Security team monitors viruses on
the Rogers network, we strongly recommend that you consistently scan
your Email attachments and downloaded files to protect your personal
computer, no matter how trusted the source. This advice applies to all Email messages, not just the one discussed in this message.

Please rest assured that the Rogers Network Security Team will continue
to monitor the situation.

Thank you,
Rogers Network Security