Recent media reports have raised questions about the severity of a computer virus referred to as the Conficker worm (also known as Downadup). It is unclear as to exactly what kind of problems this virus might create but April 1 has been given as the date when this worm might become active. The worm has existed in a couple of forms for a number of months and exploits a vulnerability in the Microsoft Windows operating system. Microsoft did release a patch in October 2008 to correct this vulnerability. Actions this virus might attempt include installing rogue software, propagating itself to other computers, and generating large amounts of traffic in an attempt to crash a network or web site, and attempting to obtain sensitive data such as financial information from a computer. All indications are that this worm only infects computers running the Microsoft Windows operating system. Mac OS, Linux, and

Much progress has been made in dealing with the viruses that have recently affected our computers and network. A scan last night and this morning showed a significant decrease in infections.

However, some faculty and staff users are still apparently opening the greeting card e-mail attachments. As long as users on the network continue to open these attachments (or, depending on how your email is configured, possibly just the message itself), the virus can continue to spread and restrictions will have to be put back on which affect everyone. Please remember not to open these and spread the word to anyone who might not have paid attention to the problem.

All PC restrictions (including those affecting printing and GroupWise access) were lifted this morning. A few users with infected computers are still being worked on. But if your computer was not infected and you still have problems, please reboot your computer.

A batch of virus e-mails disguised as e-cards has recently been sent to Olivet e-mail accounts. Several variations exist including notices from Hallmark, American Greetings, Dayspring, and a few others. Here is a sample of what one of these may look like:

===========================================

SUBJECT: You've received A Hallmark E-Card!

MESSAGE BODY:

Hello!

You have received a Hallmark E-Card from your friend.

To see it, check the attachment.

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

ATTACHMENT: ecard.zip

===========================================

We have taken measures to contain the virus and keep it from spreading. First, we are blocking e-card e-mails, regardless of whether they're legitimate or not. Second, we are blocking communication on certain network ports and have locked down certain file directories on University-owned computers. As a result, you may experience any of the following:

Recently we have been contacted about email messages some people have received asking for verification of personal information in order to maintain a university account. Please be advised that this message did not originate from any department at Olivet Nazarene University. If you have received any message like this and replied with any of your account details, we recommend you change your network/email password immediately to prevent possible misuse of your account. If you need assistance with this, please contact the IT Help Desk at extension 5302 from on-campus or at (815) 939-5302 or (866) 400-5302 (toll-free) from off-campus.

Messages such as the one mentioned above are a form of scamming called phishing. In an attempt to obtain information that can be used for identity theft and fraud, scammers create messages and web sites that look like real businesses and organizations you may deal with on a regular basis. The most