Security Bulletin
of April 12, 2007

Overview
Who is Affected

Recommended Actions

Administrative Users
Academic and All Home Windows Users
Academic and All Home Macintosh Users
Tips for Safer Computing
Further Assistance

Other Bulletins
Recent CERT Alerts

ADMINISTRATIVE Staff: If you use a computer at HOME, please read on.

STUDENTS, FACULTY, ADMINISTRATIVE STAFF, ACADEMIC STAFF AND ALL HOME USERS must follow the recommendations below.

I. OVERVIEW

Campus email users have received today an alert with a subject line such as "Worm Detected!", from "Customer Support Center" at brain-networks.com. This email suggests that a worm has been detected on your computer, and that you have to install the patch contained in the zip attachment at the bottom of the email.

This email is not legitimate, and all the attachments contained in the emails we have seen today do contain a trojan or virus. However, our current virus definitions do detect and remove this virus should you accidentally open the attachment.

II. WHO IS AFFECTED?

ALL WINDOWS USERS

III. RECOMMENDED ACTION - ADMINISTRATIVE USERS ON CAMPUS

Administrative Computing will upgrade systems in Administrative Offices, but you must upgrade your home systems. Please follow the recommended actions for Window or Macintosh home systems.

IV. RECOMMENDED ACTION - STUDENTS, FACULTY, ACADEMIC STAFF, and ALL HOME WINDOWS COMPUTER USERS

1. DO NOT follow the instructions contained in the Worm Detected email.
   
2. DELETE this email immediately.

This is a good opportunity to make sure your virus definitions are up to date.

Windows users can update their definitions by following the instructions at http://www.haverford.edu/acc/virus/win_updatedefs.html.

Macintosh users can update virus definitions by following instructions at http://www.haverford.edu/acc/virus/powermac_updatedefs.html.

V. RECOMMENDED ACTION - STUDENTS, FACULTY, ACADEMIC STAFF, and ALL HOME MACINTOSH COMPUTER USERS

Although Macintosh systems are not included in this alert, Macintosh users should confirm they are current with OS updates by following the instructions below.

1. Install all Macintosh OS critical updates.
   1. Under the Apple Menu select System Preferences.
   2. Double-click on Software Update.
   3. Check the option to Automatically check for updates weekly.
   4. Run Check Now
   5. Install required updates and reboot if prompted.
   6. Repeat steps above until all needed updates are installed.
2. If you have not yet done so, set your computer to automatically download new Mac updates.

VI. PRACTICE SAFER COMPUTING ALL THE TIME

Always follow the guidelines to Protect Your Computer at http://www.haverford.edu/acc/protect/.

VII. FOR FURTHER ASSISTANCE

Students, faculty and academic staff please contact Academic Computing:
Telephone: 610-896-1480
Email: helpdesk@haverford.edu
Web: http://www.haverford.edu/acc/helpdesk/
Location: Stokes 204
Hours: Weekdays (except Tuesday) 9am-5pm; Tuesdays 9am-9pm

Administrative staff please contact Administrative Computing:
Telephone: 610-896-1355
Email: admincc@haverford.edu

VIII. MORE INFORMATION

Additional information about computer security and current threats can be found at the following sites:

United States Computer Emergency Readiness Team (US-CERT )

<http://www.us-cert.gov/nav/nt01/>

McAfee Avert Threat Center

<http://www.mcafee.com/us/threat_center/default.asp>

Microsoft Security

<http://www.microsoft.com/security/>

Apple Product Security

<http://www.apple.com/support/security/>