ResNet - Virus Information

Like you, computers are susceptible to "infections". While you might feel sick, or run down for a few days, computer viruses can put your computer out of commission indefinitely. With this age of cyber terrorism and identity theft, it is extremely important that you:

• Keep informed, usually local news and internet news sites will have stories on virus attacks and information.
• Keep you computer's operating system and anti virus protection up to date. More information on keeping your computer up to date can be found on the Update Information Page.

The following is information to help you better understand different computer viruses and the current virus threats affecting the ResNet.

What is a Virus? A virus is a manmade program or piece of code that causes an unexpected, usually negative, event. Viruses are often disguised games or images with clever marketing titles such as "Me, nude."

What is a Worm? Computer Worms are viruses that reside in the active memory of a computer and duplicate themselves. They may send copies of themselves to other computers, such as through email or Internet Relay Chat (IRC). What is a Trojan Horse? A Trojan horse program is a malicious program that pretends to be a benign application; a Trojan horse program purposefully does something the user does not expect. Trojans are not viruses since they do not replicate, but Trojan horse programs can be just as destructive. Many people use the term to refer only to non-replicating malicious programs, thus making a distinction between Trojans and viruses.

How do I protect myself?

The University requires that all users of the University Network (ResNet included) have Anti-virus software that is updated with a current subscription. If you do not have, or are unable to afford current software, the University can provide it free of charge.

The University also recommends the use of personal firewall software. As a user, your computer can be seen by anyone on the network. Firewalls can prevent others from accessing your computer and helps protect against various network viruses. Windows XP users can take advantage of built in firewall software.

While we do not recommend a particular software program, as a student you can save money by purchasing educational versions either through the University Bookstore, or online.

NOTE: Due to University Internet security, we cannot guarantee that all software will work with the ResNet

Current Virus Alerts

Blaster Virus (w32.Blaster.Worm, w32.Lovescan)

Type of Virus: Worm. Designed to attack the Microsoft Corporation Web site in August of 2003.

How does it spread: The worm spreads through a network (like the ResNet) looking for other computers that are not protected. It will infect the unprotected computer with out the user doing anything and without warning.

Damage: While the window of operation has passed, it still able to inflect computers and cause problems to networks. The infected user will also experience:

• Inability to cut/paste
• Inability to move icons
• Add/Remove Programs list empty
• dll errors in most Microsoft Office programs
• Generally slow, or unresponsive system performance
• Complete hard drive shut down

How to remove it: Removal must be done in two steps.

Step 1: Make sure your anitvirus is up to date and do a full system scan. For more information on updating your anti virus program, click here. You can also download the Stinger (by McAfee) to remove the worm also.

Step 2: Go to the Windows Update Site and do a complete security update. This will prevent the Blaster Virus from returning. For more information on updating your computer please visit the Update Information page.

Further Blaster Virus and removal information

How to remove it: Make sure your vanities is up to date and do a full system scan. For more information on updating your anti virus program, click here. You can also download the Stinger (by McAfee) to remove the worm also.

Further Blaster Virus and removal information

Netsky ( W32/Netsky.j@MM)

Type of Virus: Mass Emailing worm that uses send out emails to any email address found on the infected computers hard drives.

How does it spread: The email is a "spoof" (it is made to look like an email from someone you know) with varying subjects, senders, and body of information. The attachment is a .pif file that looks like a ZIP file. When opened, the it will scan your entire computer sending out emails to every email address that is on the computer's hard drive.

Damage: The virus will cause increased network traffic and clogging email servers. Infected computer is not damaged, but vulnerable to an outside attack.

How to remove it: Make sure your anti virus is up to date and do a full system scan. For more information on updating your anti virus program, click here.

Further virus removal and repair information