Please read this e-mail completely, as it pertains to your Road Runner account. The master account holder should respond to this email.
Road Runner has received reports of possible virus activity originating from your computer (using IP address ***********at 07 Hundred Hours on 12/27/2005). Due to the nature of the activity, it appears that your computer has either been infected with a virus or has been compromised by a malicious mass emailing program. Some users have unknowingly installed these programs through file sharing networks
(i.e. Kazaa, Limewire, etc.), viruses or by visiting a compromised website. Since the majority of these programs appear as legitimate programs, anti-virus programs may not protect you.
In order to prevent this activity from continuing, Bright House Networks strongly recommends following:
Visit the Bright House Networks Security Website (
http://security.mybrightbiz.com/proxy.php) for instructions on how to keep your computer up to date with the latest Microsoft updates. After you finish with the updates, you will be instructed on how to scan your computer for viruses. ***NOTE*** The Security Website is currently in its testing stages. Therefore, if you find any errors in the content or functionality please let us know so we can correct them. Also, if you have any suggestions for improvement/enhancement, please send us some feedback.
If you cannot access the Security Website, or you have previous knowledge or experience with removing viruses, you can follow the steps on the second page of this letter. This information provides guidelines for resolving these types of issues. Please note that Bright House Networks and Road Runner do not provide technical support for viruses or other malware. If you are unsure how to utilize these tools, you may wish to seek assistance by contacting a certified computer technician or your computer manufacturer.
Because this activity puts your computer at risk to be used by others, we do ask that you do one of the following; (1) finish the entire process in the Security Website, (2) follow the steps in the second page of this letter or (3) have your computer serviced. In order for us to know that the issue is being resolved, we ask that you please reply to this email via the Security Website or via email.
In order to protect all of our subscribers, your account may be temporarily suspended if this activity continues. WTF Please be aware that we take this action to not only protect you but our entire subscriber base. Feel free to contact us with any questions.
Sincerely,
Security Department
Bright House Networks
High Speed Online Services - Road Runner
violations@***********
RECOMMENDED STEPS TO FOLLOW
**Keep your Computer Up to Date**
Visit
http://windowsupdate.microsoft.com. This is the Microsoft Windows update website, here you can download and install the latest security updates and patches for your version of Windows. If you have an Apple based PC, visit
http://www.apple.com/support/downloads/ for the latest patches and security updates.
**Run a Virus Scan**
Using a web based virus scanner is a good first step. Any of the sites listed below will scan your computer for viruses. Even if you have anti-virus software in your computer, we recommend that you scan with one of the sites below. Think of it as getting a second opinion about your computer.
.
http://housecall.trendmicro.com/
.
http://www.pandasoftware.com/actives..._principal.htm
.
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
The virus scanner should be able to detect and clean most viruses out there but unfortunately once your computer is infected with a virus, anti-virus software may not be able to remove the virus. If you encounter a virus that cannot be removed, Microsoft has set up a free virus support line to assist you. Call them at 1-866-PC SAFETY (727-2338). As another alternative, visit
http://vil.nai.com/vil/stinger/ or
http://www.moosoft.com/products/cleaner/download/ , there you can download a virus removal tools that might remove some of the more serious infections.
Once your computer has been scanned for viruses, we strongly recommend that you install resident anti virus software. Here are just a few of the many anti-virus programs out there.
EZ Armor -
http://www.rr.com/flash/index.cfm?startView=DOWNLOAD
AVG Antivirus -
http://www.grisoft.com/us/us_index.php
Norton Antivirus -
http://www.symantec.com/index.htm
McAfee VirusScan -
http://www.mcafee.com/us/
PC-cillin -
http://www.trendmicro.com/en/home/us/personal.htm
Panda Software -
http://www.pandasoftware.com/home/default.asp
Bright House Networks and Road Runner do not endorse or support any of the above products. They are listed for your reference and represent only a portion of those commercially available.
***Removing Unknown Proxy Service***
These steps are provided to assist you in removing the unknown proxy service running on your computer(s). If this is unsuccessful in completely removing this issue, we strongly recommend reformatting your computer.
1. Download and install Startup Control Panel
http://www.mlin.net/StartupCPL.shtml (This program shows you what runs when you re-boot computer and simplifies the process of stopping programs that run when you reboot.)
2. Open the website
http://www.sysinfo.org/startuplist.php. (you can also search for the file name using a search engine like Google)
3. Open the Control Panel on your computer (by clicking on "Start > Control Panel" -or- "Start > Settings > Control Panel" depending on your operating system).
4. Double click the "Startup" icon in the Control Panel. After the program opens, resize the window by moving the cursor to the border of the display until a double-arrow appears. Hold the left mouse key down and drag the border until you can read all of the text in the window. Additionally, resize the "Path" column so you can read all of the text.
5. Each line in the Startup Control Panel should end with a filename and ".exe". For example, one line might read "C:\Program Files\QuickTime\qttask.exe" -atboottime. In this case, qttask.exe is what you need to find.
6. On the website, type the name of the exe file in the search box (i.e. qttask.exe as illustrated in the above example). Search for that filename to see what that file does. If the file is a virus, trojan, malware, or something you are not using, turn it off in the Startup Control Panel by clicking the check box off.
7. Repeat steps 5 and 6 for each item on all the tabs in the Startup Control Panel.
***Additional Tools to Locate an Unknown Proxy***
Port Explorer
http://www.diamondcs.com.au/portexpl....php?page=home
This program is a demo that can be used for 30 days or 50 uses. After that, if you wish to continue using the program, you need to purchase the program. This tool allows you to see all programs on the computer that are talking, listening, or connected to something on the Internet. The Startup control Panel may be used with some of these program names as well to help identify them.
***What to do if above steps are unsuccessful***
We recommend the following steps to prevent a repeat occurrence:
1. Back up your documents, pictures and other important files.
2. Restore your operating system using your manufacturer supplied CD's or reformat your computer and reload Windows using your. Caution - this will permanently delete all data on your hardrive
3. If you are having difficulties, bring this letter to a qualified and certified computer technician with security and virus experience.
** Be sure to scan you backup for viruses BEFORE restoring that data to the newly loaded computer. **
**Policies**
You can view our policies online at the following link:
http://www.mybrightbiz.com/Help/rrpolicies.cfm
Bookmarks