Adapted from email :
Hi everyone,
We have detected viruses in several students’ notebook since yesterday (15th November). At the moment we have around 20 over cases of infection among students and not sure if it has already spread to RP staffs.
Situation:
This strain of virus are hidden files residing in all accessible drives on your computer, with known names like:
- msn.exe and autorun.inf
How will they affect you?
It spreads by sending out infected files through MSN to everyone on the user’s MSN list and also through any removable storage device such as thumb drives and portable hard disk. For example if the infected computer is plug in with a thumb drive, the thumb drive will get infected immediately with the virus.
How do I know if I have the virus?
1. The strain will slow down your laptop processing speed probably due to the virus multiplying itself in different file names in the user’s laptop, when virus is full fledge it causes all application to be unable to run, including in safe mode.
2. Whenever an application or anti-virus is open, it will automatically close it as such we have no chance to run any fixes.
What should I do to stop the infection?
Although the risk is low as it disrupts your work, we have shut down the MSN port as a preventive measure. Please refrain from using the MSN.
At the moment, there are no anti-virus tool that can totally remove this worm. We are working with the Symantec Security Consultants now and will keep you posted.
Symantec Documentation:
http://www.symantec.com/security_response/writeup.jsp?docid=2007-052815-0455-99&tabid=2
http://www.symantec.com/security_response/writeup.jsp?docid=2003-073009-4530-99&tabid=2
regards
Yow Hon Kong
Senior Manager, Office of Information System
Email/IM: yow_hon_kong@rp.sg
Skype: honkong11
Tel: 31001451
HP: 94509970
No comments:
Post a Comment