IF YOU ARE NOT RUNNING ON A WINDOWS PLATFORM YOU CAN IGNORE THIS MESSAGE.

There is an e-mail spreading across campus with the subject line:
New Message From Ball State University

The e-mail contains a Ball State University header and the following:

New Important Security Message Alert!
Log In in order to resolve the problem.
Click here to Log In

If you click on the link it will take you to a fraudulent Web site that is a Ball State Webmail image.  It contains what appears to be a Microsoft runtime script. It states, "If you trust the website and the add-on and want to allow it to run, click here..."

You should DELETE this e-mail immediately.  DO NOT click on the line.

If your computer's antivirus is not up-to-date then you risk downloading the Ramnit.B virus.  
Click for an image of the fraudulent Web page.

If you are running up-to-date Forefront antivirus then you will receive a message. "Review harmful or potentially unwanted software". Click on Smart Clean to protect your computer.

Ramnit.B is a computer worm that will spread itself by creating a copy on a removable device. It also scans local drives for .exe, .dll and .html files.  When found, it appends these files with an encrypted payload. The worm will create a backdoor that will allow distant attackers to carry out malicious actions. It uses rootkit techniques to hide its presence and monitor network traffic of the compromised computer.

Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

If you have feel you have downloaded the Ramnit.B virus there are a number of Web sites that provide removal instructions. If you do not feel confident in removing the virus yourself you can contact the Technical Helpdesk for help at 765-285-1517 or by e-mail at helpdesk@bsu.edu.