dog-star-man.livejournal.comI sent this note out today in light of the crazy/ugly new virus on the loose.
Hi,
Normally, I don't send out a warning about every virus that comes out, but this one is particularly nasty and could cause some serious damage. Please read the attached details below.
Please be careful about any e-mail attachments that you save and also be wary of websites that ask you if you would like to install any software. These are the main places that this one can come from.
It will also mail itself through instant messenger programs. I do not suggest that you use these in the first place, but if you do, I'd appreciate it if you stop using it and un-install it. If you persist in using any type of IM and a virus does work it's way into our network and messes with the files on your PC and then continues on to the rest of the network and servers, you have been warned and this will be your fault. If you need help un-installing an IM from your system, I will gladly help.
If you notice anything strange on your PC, or if you get any messages from your virus scan software about threats, please let me know immediately.
**Attached Details**
Over the last week, "Blackworm" infected about 300,000 systems based on analysis of logs from the counter web site used by the worm to track itself. This worm is different and more serious than other worms for a number of reasons. In particular, it will overwrite a user's files on February 3rd.
At this point, the worm will be detected by up to date anti-virus signatures. In order to protect yourself from data loss on February 3rd, you should use current (Jan 17th or later) anti-virus signatures. Note, however, that the malware attempts to disable/remove any anti-virus software on the system (and does this every hour while the system is up), so if the machine was infected before signatures were deployed, obviously, that anti-virus software can't be expected to clean up the infection for you.
The following file types will be overwritten by the virus: DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP, ZIP. The files are overwritten with an error message( 'DATA Error [47 0F 94 93 F4 K5]').
The first thing you should do is to update your anti virus signatures.
blah blah blah....
Notice the bold text. I should know never to put that in any e-mail I send out. So far, I've gotten numerous calls on just about any topic. I've answered what an IM is, explained to a person that the reason their printer isn't printing isn't the cause of the virus, but because they leave their PC on for weeks in a row, etc. Now that I sent it out, any small glitch that happens on the network, I hear about it. I've also heard about 20 different stories from various people about any virus they've ever had or think they've had on their home PCs, friend's PC, grandma's PC and on and on....
Now I know what to do if I ever start feeling lonely.