New Worm Rapidly Spreading
01/22/2009
Microsoft Windows users need to be aware of a new and serious sleeper computer worm varyingly referred to as Conficker as well as Downadup, Downup, Win32, and Kido that appears to be spreading rapidly. Reports of this particular piece of malware first surfaced in mid-Fall 2008. Microsoft released patches shortly after first reports.
As of January 21, 2009, popular computing media sites and antivirus software vendors are reporting a massive outbreak occurring due to the large number of Windows computers that have not yet downloaded and applied the requisite patch — specifically the update referred to in Microsoft Security Bulletin MS08-067.
While there are not reports of actual harm to data at this point, according to Microsoft, this malware disables several important system functions, including key services such as Windows Auto Update, Windows security products and it downloads arbitrary files. After the infection occurs, the infected PCs also begin scanning their networks to attempt to hijack passwords.
The full potential for harm is not yet known, as this is a sleeper-type virus infection. However, it clearly potentially exposes infected PCs to later hijack, since it appears to allow remote code execution.
This infection spreads primarily when an infected machine is attached to a network. In addition, depending on the specific variant, this worm may also spread via removable drives such as USB flashdrives, and by exploiting weak passwords.
For more information including preventive and recovery steps users should take are available at help.msu.edu, knowledgebase article number 11931.
Terms to Know
Malware: software designed to infiltrate or damage a computer system without the owner’s informed consent. Malware includes computer viruses, worms, trojan horses, most rootkits, spyware, dishonest adware, and other malicious and unwanted software.
Virus: a computer program that can copy itself and infect a computer without permission or knowledge of the user.
Spyware: computer software installed surreptitiously on a personal computer to intercept or take partial control over the computer. Spyware can collect personal information, Internet surfing habit, sites visited, and can change computer settings resulting in slow connection speeds and loss of programs or Internet access.
February 2009 IT Exchange Meeting
01/14/2009
MSU IT Exchange, a community for collaboration, will come together on Wednesday, February 4, 2009, from 3:30 p.m. to 5:00 p.m. in the Erickson Kiva.
Tentative Agenda
-Community ID, Academic Technology Services
-Video Conferencing, Health Information Technologies
-2009 MSU Technology Strategy Outline, Vice Provost for Libraries, Computing, and Technology
Visit the IT Exchange forum at forums.msu.edu for current information regarding meetings and to participate in IT related discussions.
Libraries, Computing, and Technology hosts the MSU IT Exchange bi-monthly meeting to bring people interested in information technology at MSU together as a cohesive group. The meetings are open to all individuals interested in MSU’s information technology environment.
