IF YOU ARE NOT RUNNING ON A WINDOWS PLATFORM YOU CAN IGNORE THIS MESSAGE.
There is an e-mail spreading across campus with the subject line:
New Message From Ball State University
The e-mail contains a Ball State University header and the following:
New Important Security Message Alert!
Log In in order to resolve the problem.
Click here to Log In
If you click on the link it will take you to a fraudulent Web site that is a Ball State Webmail image. It contains what appears to be a Microsoft runtime script. It states, "If you trust the website and the add-on and want to allow it to run, click here..."
You should DELETE this e-mail immediately. DO NOT click on the line.
If your computer's antivirus is not up-to-date then you risk downloading the Ramnit.B virus.
Click for an image of the fraudulent Web page.
If you are running up-to-date Forefront antivirus then you will receive a message. "Review harmful or potentially unwanted software". Click on Smart Clean to protect your computer.
Ramnit.B is a computer worm that will spread itself by creating a copy on a removable device. It also scans local drives for .exe, .dll and .html files. When found, it appends these files with an encrypted payload. The worm will create a backdoor that will allow distant attackers to carry out malicious actions. It uses rootkit techniques to hide its presence and monitor network traffic of the compromised computer.
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
If you have feel you have downloaded the Ramnit.B virus there are a number of Web sites that provide removal instructions. If you do not feel confident in removing the virus yourself you can contact the Technical Helpdesk for help at 765-285-1517 or by e-mail at firstname.lastname@example.org.