[Blueboard] Campus Network Group - Virus Alert

Ton Dolor fdolor at ateneo.edu
Tue Nov 22 22:05:34 PHT 2005

Virus Alert

Computer users are advised to disregard, and delete outright, email with
the following headers:

SUBJECT: Your IP was logged or You visit illegal websites
FROM: Post at fbi.gov or Mail at fbi.gov or Admin at cia.gov

The body of the email states, "we have logged your IP-address on more than
30 illegal Websites." Said mail has a zipped file attachment which
contains the latest variant of the W32/Sober worm. While Trend Micro
considers this malware as non-destructive, it has a high distribution
potential as it spreads itself via email.

Who are at risk?
Trend Micro OfficeScan users should be safe from this malware. However,
unprotected Windows 98, ME, NT, 2000, XP and Server 2003 machines are
highly at risk.

What can the user do?
User should never download email attachments especially from dubious
sources. While OfficeScan offers protection against worms, trojans and
viruses, users may as an extra precaution, scan their hard drives
regularly for possible infection.

Computer users that do not have any form of virus protection may download
ClamWin, an open source antivirus program, at this URL:


A ClamWin configuration guide is available at this site:


It should be noted, however, that OfficeScan still offers superior
protection than ClamWin since the latter has no real-time scanning
feature. This means, ClamWin users will have to manually scan a file in
order to detect a virus. In contrast, OfficeScan will detect and block a
virus before it enters a computer.

To know more and sign up for the OfficeScan service please visit this


Ton Dolor
Ateneo de Manila University
Campus Network Group (CNG)
email: fdolor at ateneo.edu
phone: +63(2)4266001-4187

More information about the Blueboard mailing list