Two computer viruses have been causing slowdowns across the Georgetown University network and e-mail system in recent weeks. University Information Services is taking steps to mitigate the effects. The W32.Blaster.Worm and W32.SoBig viruses have struck Internet users worldwide.
In response to these two “worms,” or quickly spreading viruses, UIS has implemented a filter on outgoing e-mail. Users will not be able to send attachments larger than 90 kilobytes, an attempt to stop the replication of the W32.SoBig worm, which spreads by sending infected attachments to entries in a victim’s address book.
UIS is considering other measures to prevent the spread of viruses, including the possibility of installing network filters in residence halls. This would allow users to access the Internet but would prevent incoming traffic. This approach would prevent the spread of worms such as the Blaster virus.
Such a filter could also be used to block users from sharing files with users outside of their residence halls, and would block peer-to-peer file-sharing via programs such as Kazaa.
According to UIS Director Beth Ann Bergsmark, the Blaster virus was first detected on the GU network on Monday, Aug. 12. At that time, UIS identified 350 infected machines and began disabling the network connections to the affected systems.
The Blaster infection began when an infected computer was connected to the GU network. It did not originate from the Internet or an e-mail attachment.
The W32.Blaster.Worm virus differs from other worms; unlike most viruses that spread through infected e-mail attachments, the Blaster worm requires no actions on the part of the victim. Rather, Blaster relies on a flaw in the Windows XP, 2000 and NT operating systems.
Microsoft issued a patch addressing this problem in July, however many users do not regularly check for updates. UIS sent a broadcast e-mail to the Georgetown community on Aug. 4, notifying users of the vulnerability that would later be exploited by Blaster.
Like other Internet worms, the Blaster virus generates a large amount of network traffic as it attempts to replicate itself and infect other computers. However, Bergsmark notes that the traffic from the Blaster worm has not yet affected GU network performance. UIS is working to remove infected machines from the network, in order to prevent the further spreading of the worm, especially with students returning to campus and hooking up to the network.
