Information regarding the new W32/Bagle.j@MM virus

Revised: March 8, 2004
Originally Posted: March 3, 2004

Symptoms

Email containing the W32/Bagle.j@MM virus may have any of the following symptoms:

• A subject line with a warning or message regarding email or email security
  
  
• A greeting that says "Dear user of... " followed by the email domain (such as "franklin.edu")
  
  
• The body of the message states that your email has been disabled, will be unavailable, has been attacked, or has sent outgoing mail containing viruses
  
  
• Refers to an attachment that contains further details
  
  
• Provides a password to access a *.zip file that is attached to the email
  
  
• Is signed from "The user's domain team,"  or "http://(user's domain)," where, in our case, user's domain would be franklin.edu or www.franklin.edu, or email.franklin.edu.

Related Blocks on email sent to Franklin University email addresses

In response to the recent W32/Bagle.j@MM email virus outbreak, Franklin University is now blocking all email sent to student email addresses (email.franklin.edu), or faculty and staff email addresses (GroupWise) that contain any attachment with any one of the following extensions:

• .pif
• .exe

Note: From approximately 8:00 p.m. EST Friday, March 3rd until 10:00 a.m. EST, Thursday, March 4th, any email containing an attachment with the .zip filename extension was also being blocked. However, now any email containing an attachment with a .zip filename extension will be blocked only if the full filename matches one of the full filenames listed below.

Any email that has an attached file with a name that matches one of the names listed below will also be blocked:

This block will remain in effect until future notice. However, please keep in mind that you may be at risk of receiving the virus despite our best efforts to protect your email account. If you received an email that contains any of the above symptoms, it may be a virus. As always, it is extremely important that you open attachments only if you were expecting the person to send an email attachment to you, and the body of the message and attached filename are appropriate given the context of the information you were expecting to receive.

Also note, any email you attempt to send to a Franklin University faculty or staff, or student email address that contains an attachment with a filename as described above will be blocked. We apologize for any inconvenience this may cause.