The newest worm making the rounds is W32/Bagle.J. This worm spoofs the "From" address to be from an administrative role account at your domain name. For example, users of Avvanta.com are receiving messages claiming to be "From" management@avvanta.com, staff@avvanta.com etc claiming that your email account will be inactive or that the servers will be unavailable. This is of course, not true.The payload of the worm is an encrypted Zip archive that requires a password to unzip. If you have attempted to open this archive it is possible that your computer is now infected with the worm. The worm installs a back-door on your computer and disables any active Anti-Virus software you may have. Instructions for manually removing the worm can be found on the Trend Micro web site. Please note: Avvanta Communications Corporation will never send you any attachments via email without prior notice! If you receive an email containing an attachment claiming to be "From" any Avvanta administrative account and were not told in advance to expect the attachment, do not open the attachment.
|
