The Blaster Worm and you

New: for information on removing the Blaster or Nachi worm, go to http://www.depts.drew.edu/cns/support/Fix-Blaster-Doc.php

With students returning to campus, Computing and Network Services is noticing the appearance of recent variants of the Blaster worm affecting on-campus machines running Windows XP. This situation could become critical with severe network disruptions and lack of access to network files, email, and the Internet. Please read this message carefully and follow the instructions and warnings below.

Faculty and staff computers with the standard Novell client that were in use and rebooted between July 17th and August 17th have had the necessary patches installed, and should not be susceptible to infection by the Blaster worms.

If you’re a returning student who has not yet arrived on campus, please take the time to get the latest updates for your computer by performing a Windows Update (Start Menu/All Programs/Windows Update). Also, get the latest F-Prot virus signature files via the F-Prot Updater, and fully scan your computer for viruses. We strongly recommend this whether you’re running Windows 98 or Windows XP. We also ask that if you’re not sure your computer has been patched that you not connect it to the campus network until you’ve brought it to the CNS Helpdesk to have your computer checked out.

The standard Drew University computer configurations are configured to automatically load the latest virus definition files throughout the day, and automatically download and install the necessary Microsoft patch to prevent infection by the Blaster worms. However, if you’re running a non-standard configuration, or have disabled the Application Explorer, you have not been receiving these updates. In addition, if you’re a returning student, you may already be infected and may spread it to others on campus that have not had the Microsoft patch installed before these updates can run. If your computer is infected, Computing and Network Services may need to prevent your computer from accessing the network until it is patched and disinfected, to avoid a severe disruption in service to the rest of campus. You will need to call or visit the CNS Helpdesk for disinfection instructions and procedures if you cannot log in to the network or access the Internet.

Customers who are using a non-Drew-issued computer are responsible for scanning for viruses and staying up-to-date with Windows updates (or other relevant security patches for the operating system you’re using). As per the Campus LAN agreement, Computing and Network Services may restrict network access for computers that are causing disruption of service to other systems on the network, and require the customer to repair the situation before allowing that computer to reconnect to the network. The CNS Helpdesk will be able to provide some assistance for these issues.

The CNS Helpdesk will be open from 1pm to 5pm and 6pm to 11pm on August 31, 2003 and for the normal fall semester hours effective Monday, September 1st. In addition, a satellite CNS Helpdesk will be open from 12pm-6pm on Monday and Tuesday in the University Center.

Please note that this is an evolving situation that may cause disruptions to Internet connectivity, network downtime, service outages, or other network issues. CNS full-time and student staff will be working throughout the weekend to reduce or eliminate the occurrence of such issues. Due to the nature of the issue, we will attempt to notify the campus with signs, voicemail, and other methods as well as e-mail and Web pages.

Computing and Network Services thanks you in advance for your patience and cooperation.