RE: Virus Notification Template

["Jennifer Fountain" <jfountain () rbinc com>]

This is what we send out and the users seem to understand (HTH):

Subject:        Virus Alert - 1/4/2004

Notice:

There is a new virus that is circulating around the internet and may
cause damage to your machine.  Please read below for a description and
how to prevent infection.  If you receive any email or files that
resemble the below description, please do not open the file/email and
delete the file/email immediately.

Name of virus: 
MyDoom

Method of Infections:
Email

Virus Characteristics:
The virus arrives in an email message as follows:
From: (Spoofed email sender)
Do not assume that the sender address is an indication that the sender
is infected. Additionally you may receive alert messages from a ail
server that you are infected, which may not be the case. 

Subject: (Varies, such as)
*       Error 
*       Status 
*       Server Report 
*       Mail Transaction Failed 
*       Mail Delivery System 
*       hello 
*       hi 

Body: (Varies, such as) 
*       The message cannot be represented in 7-bit ASCII encoding and
has been sent as a binary attachment. 
*       The message contains Unicode characters and has been sent as a
binary attachment. 
*       Mail transaction failed. Partial message is available. 

Attachment: (varies [.bat, .exe, .pif, .cmd, .scr] - often arrives in a
ZIP archive) (22,528 bytes)
*       examples (common names, but can be random) 
*       doc.bat 
*       document.zip 
*       message.zip 
*       readme.zip 
*       text.pif 
*       hello.cmd 
*       body.scr 
*       test.htm.pif 
*       data.txt.exe 
*       file.scr 

Symptoms (if infected):
*       Upon executing the virus, Notepad is opened, filled with
nonsense characters. 

Please forward all questions or concerns to the helpdesk.

Thank you
The Helpdesk. 

-----Original Message-----
From: gipson5 () comcast net [mailto:gipson5 () comcast net] 
Sent: Sunday, March 07, 2004 10:47 PM
To: security-basics () securityfocus com
Subject: Virus Notification Template

Does anyone know of a generic Word, .txt, etc. template for sending out
email virus alerts/communications to end users?  Thanks in advance.

Todd Gipson
Security Manager
Invision Imaging

------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off any course! All of our class sizes are guaranteed to be 10 students
or less to facilitate one-on-one interaction with one of our expert
instructors. 
Attend a course taught by an expert instructor with years of
in-the-field pen testing experience in our state of the art hacking lab.
Master the skills of an Ethical Hacker to better assess the security of
your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------