An Explanation of how the NetSky Worm Operates
- An email with an infected attachment arrives in your inbox.
- The subject line of the email may be one of 50 different phrases.
- The message found within the email is short (one sentence) and varies from
over 150 different randomly selected items.
- The attachment may vary from one of 50 different names, but the extension
(the end of the file name) will be either .exe, .com, .pif, or .scr.
- Once opened, the worm then searches your computer for email addresses
in your address book, Word documents, html files, text files and many other
less common files.
- The worm then sets up an email server on your computer and begins to send
out copies of the worm to the addresses found on your system.
- To make matters worse, the worm "spoofs addresses" (forges). This makes
it appear that the message is from someone whose address was found on your
computer
rather than from you.
- Some of the subjects, messages and attachments are of a suggestive nature
and may be offensive.
- The worm will continue to send out hundreds of messages from your computer
every minute until it is stopped.
What results from this happening?
- Your computer will operate slower and/or improperly.
- Network traffic will increase to the point that the email server and
routers will malfunction due to overload.We lose
network access (local and Internet) when routers malfunction.
- People will think that someone (those who have an addresses
on your computer) is sending them inappropriate email. (see number 8 above)
- District IT personnel will be forced to address this problem rather than
attending to support/repair/installation issues.
- Attention will be diverted from our mission: teach students.
What is the Office of Information Technology doing to solve this problem?
- Continually upgrading anti-virus devices (chart)
- More closing monitoring network activity to identify those computers that
may have been infected
- Dispatch a technician to remove the worm from infected systems
- Educating users as to the dangers associated with viruses/worms
Please call Mark Williams at 552-3020 if you have any questions regarding
this issue.
Information regarding viruses/worms
as well as how to keep your computer safe
