SBC Logo
SBC AlertSBC Internet Services

Worm Infection: Immediate Action Required

Free Virus Scanner
Dear SBC Internet Services Subscriber:

It is extremely important that you read this message and take immediate action.
Failure to act may require us to temporarily suspend your service.

As part of our ongoing commitment to keep customers informed about Internet safety, SBC Internet Services last week sent a message strongly urging our Members running Microsoft Windows NT, 2000 or XP to take appropriate security measures to help protect their computers from an Internet worm called Blaster.

Unfortunately, we have reason to believe that your computer has been infected with a variant of the Blaster worm (also known as Blaster.D and Welchia) and that it is continuing to infect other computers. Because of the nature of this particular worm, you may not notice any effects right away. However, the worm on your system could have significant impact on others. It is necessary for us to request your immediate action in order to help protect all SBC Internet Services customers.

To maintain service, you must take a few minutes now and follow the removal instructions at: http://www.microsoft.com/security/incident/blast.asp.

Once you have done that, please go http://windowsupdate.microsoft.com to download and install all available critical patches for your operating system. You must perform these actions on all computers that connect using SBC Internet Services.

Once you have completed download of all critical patches, reboot your pc and log off and back onto the Internet to validate your service.

If you have questions about this email or need other information, please contact SBC Internet Services toll free at 877-SBC-DSL5.

Thank you for your prompt action on this important matter.

Sincerely,

SBC Internet Services

SBC does not access the contents of customers' computers. SBC uses traffic statistics to detect high traffic levels which may indicate an infected computer.

Technical Details: SBC Internet Services believes a computer using your IP address may be infected because of a high level of network traffic on TCP Port 135 originating from your network IP address. If your router uses Network Address Translation (NAT) or you use Microsoft's Internet Connection Sharing (ICS) to connect to the Internet, one or more computers on your network may share the same IP address. Computers with IP addresses beginning with 10.x.x.x, 172.16.x.x.x through 172.31.x.x and 192.168.x.x use Network Address Translation (NAT). If multiple computers on your network share the same IP address, you must check all your computers for infection. SBC can not determine which particular computer on a NAT network is infected. You may continue to receive this message until all the computers on your network have been repaired.