IS Connection

Virus Warnings for Messages You Never Sent

HelpDesk is being asked regularly about what to do with virus warnings users are receiving for messages they are sure they never sent. What is the reason for this?

NOTE TO MACINTOSH USERS: This article is addressed primarily to Windows computer users. Macintosh users -- it is very, very rare that a virus will infect your computer. Read on only if you take pleasure in reading about the frustrations Windows users must suffer because of "bad things" that can attack their computers.

FOR WINDOWS USERS: Three (3) things to remember . . .
. . . FAKES . . . WARNINGS . . . UPDATES . . .

1. FAKE E-MAIL ADDRESSES: E-mail addresses that appear in the FROM field can easily be fake (this is known as spoofing). Just because an address appears in your FROM field does NOT guarantee that the address is real or that the person who owns the address really sent the message. Most of the viruses circulating in the Internet today will "harvest" e-mail addresses from the computer they infect and then randomly assign these addresses in the FROM and TO address fields of the messages they send to propagate the virus.

OUR ADVICE: Seeing is NOT believing! Be skeptical of FROM addresses if there is anything unusual about the message you have received.

2. VIRUS WARNINGS ARE WORTHLESS: In earlier days of e-mail, when viruses were not very sophisticated and not nearly so prevalent, it seemed like a good idea to inform the sender of a virus infected message that a virus was discovered in a message they sent. Today's viruses are very sophisticated and regularly send bogus e-mail messages to propagate themselves with faked from addresses. It is no longer considered appropriate to send virus warning notices because most FROM addresses are fake (spoofed).

OUR ADVICE: If you are using a computer owned by EMU that is attached to the EMU network and you receive a "virus warning" you can assume with 99.99% assurance that the message is in response to a spoofed FROM address. You did NOT send the message and the anti-virus system that is sending you the warning is doing so inappropriately. Just hit DELETE!

3. KEEP YOUR SYSTEM UPDATED: The best defense against computer viruses and worms is to keep your Windows computer updated for Sophos anti-virus software and Windows operating system updates. Windows computers owned by EMU and configured by Info Systems are configured for updates as follows:

WINDOWS 98 (about 75% of employees using Windows):

ANTI-VIRUS -- You receive Sophos updates each time you logon to the network. It is important that you logoff each day and re-login each new day to insure you get the updates at least every day.
WINDOWS

WINDOWS XP (about 25% of employees using Windows):

ANTI-VIRUS -- Your Sophos anti-virus is configured to automatically check for updates throughout the day. As new updates are received by the EMU master system they are pushed to your computer and during the update process the Sophos status box will appear on your screen. Please do not attempt to interrupt this process.

WINDOWS UPDATES: Your computer is configured to regularly check for Windows Updates and download them. In some situations you may be asked whether you want them installed. ALWAYS SAY "YES" TO THIS QUESTION. Every update that is downloaded is a CRITICAL update and needed by your computer in order to guard against attacks.

If you have any questions please contact the Info Systems HelpDesk (x4357, 540-432-4357, helpdesk@emu.edu).

Windows XP/Novell Fix

THE PROBLEM
Windows XP computers on the EMU network have had a problem where they intermittently do not load the desktop icons after logging in.

THE SOLUTION
IS will be forcing upgrades to the Novell client on all Windows XP computers connected to the network to resolve the problem. This includes faculty/staff and students.

HOW WILL THIS AFFECT ME?

If you have a Macintosh: This will NOT affect you at all.

If you have Windows 98: This will NOT affect you at all.

If you have Windows ME: This will NOT affect you at all.

If you have Windows XP: When you log in, the newest Novell client will be automatically installed on your machine. Then your computer will be rebooted. After that, you can log in and things will proceed normally. This is a one-time procedure.

VERY IMPORTANT: A dialog box will appear during this upgrade. DO NOT click CANCEL during the upgrade process. Doing so will prevent you from connecting to Novell and will require that Info Systems work with your computer to fix the problem.

PLEASE, DO NOT CLICK CANCEL!

This process will be performed during Windows XP login sessions beginning Monday, May 17.

If you have any questions, please contact Help Desk (helpdesk@emu.edu, x4357, 540-432-4357)