 |
| |
|
|
PC Software and
|
||
Primary Services:Description of Latest "Virus/Worm" & Computer Threats:See the Latest Virus Threats here: Latest Current Virus Threats (New Page added: Feb 14, 2006) "Zotob & Estob Worm/Virus running rampant" (Info Posted: 8/18/2005) ".... Network worms are shutting down computers running Microsoft's Windows 2000 operating system, security experts warned on Tuesday (8/16/2005). Computers across the United States are being hit, including those at cable news station CNN, television network ABC and The New York Times. Tokyo-based antivirus company Trend Micro blames the havoc on various worms, including the Zotob worm that hit the Internet over the weekend and new variants of the Rbot worm. Symptoms of infection include the repeated shutdown and rebooting of a computer, Trend Micro said....." SEE ARTICLE: Zdnet "Windows Worms Wreak Havoc": Windows Worms Wreaks Havoc Symantec Zotob Removal Tool: Symantec Zotob Removal Tool Symantec Esbot Reemoval Tool: Symantec Estob Removal Tool Microsoft, related to this Plug & Play Vulnerability & Patches (MS05-039): Microsoft Patch for Windows 2000 Symantec Automated Support Scan Assistant: Symantec Automated Scan Assistant (Posted: 8/19/2005) "FBI E-Mail Scam Alert" Yet Another growing, widespread E-mail Scam! The FBI today (2/22/2005) warned the public to avoid falling victim to an on-going mass e-mail scheme wherein computer users receive unsolicited e-mails purportedly sent by the FBI. These scam e-mails tell the recipients that their Internet use has been monitored by the FBI's Internet Fraud Complaint Center and that they have accessed illegal web sites. The e-mails then direct recipients to open an attachment and answer questions. The attachments contain a computer virus. ) (posted 02/28/2005) See the following for latest information on this E-Mail Scam: FBI E-Mail Scam Alert or, Visit the FBI Home Page Here: FBI Home Page "Phone Scam (Area Codes 809, 284 & 876)" (Yet Another growing, widespread threat!) (posted 09/17/2004) See the following for latest information on: AREA CODE SCAM [Adobe PDF file] Don't respond to either Phone Calls, Recorded Messages, E-mails or Webpages that ask you to call any of the above area codes. Charges can run as much as $2,400.00 per MINUTE! "Phishing, What Is It?" (Another growing, widespread threat!) (posted 08/16/2004) Phishing attacks use 'spoofed' e-mails and fraudulent websites designed to fool recipients into divulging personal financial data such as credit card numbers, account usernames and passwords, social security numbers, etc. By hijacking the trusted brands of well-known banks, online retailers and credit card companies, phishers are able to convince up to 5% of recipients to respond to them. Read all about it here: Anti-Phishing Workgroup [Antiphishing Organization] See also the Federal Trade Commission Site: How Not to Get Hooked by a ‘Phishing' Scam [FTC] See also the US Department of Justice PDF file: USDOJ Special Report on Phishing (PDF) [US Dept of Justice - or visit www.usdoj.gov] (posted 08/16/2004) "Bagle Worm Variant Slips Through Defenses" [Bagle.AQ] (posted 08/12/2004) Read about it here: New Bagle Worm [EWeek Article] "New MyDoom Variant Uses Yahoo People Search" (posted 08/12/2004) Read about it here: New MyDoom Variant [EWeek Article] Virus/Worm Warning: "W32.Beagle.AG@MM WORM" (posted 07/20/2004) Discovered on: July 19, 2004 Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP. Overview: W32.Beagle.AG@mm is a mass-mailing worm that uses its own SMTP engine to spread through email and opens a backdoor on TCP port 1080. The subject line, body, and attachment name of the email vary. The attachment will have a .com, .cpl, .exe, .scr, or .zip file extension. If the file attachment is a .zip file, it will be password protected. What You Should Know About the W32.Beagle.AG@MM Worm and Its Variants (Symantec site): See Symantec information page here: W32.Beagle.AG@MM Ino Page [Symantec] And Symantec's W32.Beagle.AG@MM Removal tool page: W32.Beagle@mm Removal Tool Virus Warning: FAKE MICROSOFT UPDATE!! (posted 02/11/2004) A new virus E-Mail is going around that looks like an update from Microsoft. The sender is listed as “MS Corporation Network Security Section”. It has 2 attachments: 1. Upgrade28.exe: and 2. W32.Swen. The email looks official, but is not from Microsoft. It will have the Microsoft logo and something similar to the following: "Microsoft Consumer... ....this is the latest version of security update, the "February 2004, Cumulative Patch" update which resolves all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three new vulnerabilities. Install now to help protect your computer from these vulnerabilities, the most serious of which could allow an malicious user to run code on your computer. This update includes the functionality of all previously released patches...." Delete it and DO NOT open the attachments!!! (NEVER click on an E-mail attachment unless you are expecting it from a KNOWN source!!) Helpful Websites and Resources:NOTE: These hyperlink websites are provided as a convenience to our visitors. They are NOT intended as an endorsement of any vendor or particular Virus Removal/Scanner, agent, software, or company. Neither Sumter County Government, nor any of its employees or agents, are responsible for your use (or mis-use) of any information contained at these resources. Please be aware that the methods and steps for analyzing and removal of these "PESTS!!" may differ depending on what windows operating system is present on your Personal Computer (Eg. Win 95, Win98, WinME, Win2000, WindowsXP, or other operating system. READ the detailed information carefully!!!Virus Websites/Resources:NOTE: PLEASE also see the "Other (EXTREMELY!) Helpful Resources" information below. PLEASE visit the Symantec (NORTON) website to see an A-Z listing of all USA Virus/Worm threats and the "Latest Threat"; "Risk factors"; "Date Discovered"; and "Protection" information here: USA Visitors here: Symantec A-Z Virus Info International visitors may go here: International Visitors PLEASE visit the Symantec (NORTON) website to obtain certain Virus Removal Tools here: A Few Removal Tools PLEASE visit the Symantec (NORTON) website to see "Online Virus Removal Tutorials" here: Tutorials The above Symantec (NORTON) "TUTORIALS" may require the presence (or downloading) of "Macromedia Shockwave Player" software module to view them. If the Shockwave Player is NOT on your PC, you will be prompted to go to the Macromedia site and download it. Please consult your support service or personnel for assistance. Macromedia Shockwave Player download site: Macromedia Player Site SOME ONLINE WEBSITE(s) TO SCAN YOUR PC & REPAIR VIRUSES: (A) Visit the Pandasoft website to perform an "activescan" of your computer via the Internet here: Pandasoftware site (HINT: Click on the "Free online virus scan" hyperlink on their page. They now Require your E-Mail Address to run it...) (B) Visit the "Housecall" (TREND Micro) website here: (Trend Micro) Housecall Scan Info Page (HINT: Click on the "Scan Now" link...) (C) See the latest Virus Alerts from the TREND Micro website here: Latest Alerts from the Trend Micro (For "PC-cillin" software users).... (D) See the latest Virus Alerts and Protection Strategies from Microsoft here: Microsoft Virus Alerts Microsoft Protection Strategies for Home Users see here: Home Users Strategies Microsoft Protection Strategies for Networked Users see here: Microsoft Protection Strategies (E) Free Trojan Scan online here: Free Trojan Online Scan site (F) Free Microsoft Windows Malicious Software Removal Tool Is Located Here: Microsoft Windows Malicious Software Removal Tool (NOTE: Checks computers running Windows XP, Windows 2000, and Windows Server 2003 (only) for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any infection found. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed. Note: You must be logged on to your computer with an account that is part of the Administrators group to run this tool.... READ THE PAGE CAREFULLY!) Gateway PC's Autoscan For Driver Updates: Gateway Driver Scan Microsoft's SCAN FOR UPDATES (Operating System) PATCHES: Microsoft OS Updates & Patches IBM's SCAN FOR UPDATES, Hardware & Software Updates Site: IBM Autoscan for Updates Other (EXTREMELY!) Helpful Resources:MajorGeeks Support Forums website: Help From MajorGeeks Basic Spyware, Trojan And Virus Removal The Spamhaus Project website: Spamhaus Adaware Site (Free Software to remove other Spam): Free Adaware FREE!!! Adaware Download Sites: Download Sites for Adaware (Click on the freeware* link) FREE!!! Spybot Search & Destroy v1.4 (Excellent Sftw!!!!): Spybot S&D (Search & Destroy) (Click on the Download link on their site.) or see here: Spybot S&D (Search & Destroy) (Click on the Download link on their site.) FREE!!! SpywareBlaster (FREE) Software: SpyWareBlaster [Free Spyware Killer SFTW]Dealing With Junk Email:Settings you can make in Outlook/Outlook Express: Junk Email PDF (In Adobe PDF Format) "Slam The Spam" (Articles from PC Magazine, What is Spam, How do they get your E-mail Address, etc...): Slam The Spam PDF (In Adobe PDF Format)Hoaxes Research Sites:Virtual Myths/Hoaxes Site: Virtual Myths/HoaxesJava Runtime Engine (JRE) for Windows Resources:SUMTER COUNTY E-GOV NOTES: In addition to installing the required "RVI Software", the "E-Gov" RVI image(s) page(s) on our website may require your PC to have a working version of Java Runtime Engine to view the scanned images. You can access the (free) Sun Java Software Site here: SUN JAVA DOWNLOAD SITE: For Windows 95 / 98 / 2000 / NT 4.0 / ME / XP (U.S. English only) (Filesize = 5,438,680 bytes.) Sun JRE Site Download J2SE v 1.3.10a (Try this one 1st.) (OR, another version if above doesn't work)... Sun JRE Plug-In Site Download Archive Site: Java Plug-in, v 1.1.3_007 Windows 95 / 98 / 2000 / NT 4.0(Filesize = 5,430,408 bytes.) NOTE: You may have to remove one version and try another to see if it works with your PC. Also, you may need to re-boot/restart your PC....Please be advised, we cannot provide "technical support" for your PC software issues.
Tips on Avoiding Computer Worms:
1. Most of the worms which use e-mail to propagate use Microsoft Outlook or Outlook Express to spread. If you need to use Outlook, download and install the latest Outlook security patch from Microsoft. In general, keep your operating system and applications up-to-date and apply the latest patches when they become available. Be sure to get the updates directly from the vendor. 2. When possible, avoid e-mail attachments both when sending and receiving e-mail. 3. Configure Windows to always show file extensions. In Windows 2000, this is done through Explorer via the Tools menu: Tools/Folder Options/View - and uncheck "Hide file extensions for known file types". This makes it more difficult to for a harmful file (such as an EXE or VBS) to masquerade as a harmless file (such as TXT or JPG). 4. Never open e-mail attachments with the file extensions VBS, SHS or PIF. These extensions are almost never used in normal attachments but they are frequently used by viruses and worms. 5. Never open attachments with double file extensions such as NAME.BMP.EXE or NAME.TXT.VBS 6. Do not share your folders with other users unless necessary. If you do, make sure you do not share your full drive or your Windows directory. 7. Disconnect your network or modem cable when you're not using your computer - or just power it down. 8. If you feel that an e-mail you get from a friend is somehow strange - if it is in a foreign language or if it just says odd things, double-check with the friend before opening any attachments. 9. When you receive e-mail advertisements or other unsolicited e-mail, do not open attachments in them or follow web links quoted in them. 10. Avoid attachments with sexual filenames. E-mail worms often use attachments with names like PORNO.EXE or PAMELA_NUDE.VBS to lure users into executing them. 11. Do not trust the icons of attachment file. Worms often send executable files which have an icon resembling icons of picture, text or archive files - to fool the user. 12. Never accept attachments from strangers in online chat systems such as IRC, ICQ or AOL Instant Messenger. 13. Avoid downloading files from public newsgroups (Usenet news). These are often used by virus writers to distribute their new viruses. 
| ||
|
Sumter County IT Dept © 2005 | All Rights Reserved | |
