18 May 2007

Malware

More work for support staff.

PCs infected with viruses and other malware continue to cause problems for the Division and the wider University. On more than one occasion over the last few months staff returning from China have returned with malware on the portable PCs they took with them, apparently transmitted through the use of thumb drives to transfer data from PC to PC.

The Fujacks/Looked.EK trojan has been particularly difficult to deal with. As soon as an infected computer is attached to the UC network, the malicious code is transferred to network drives, and unless it is eradicated will continue to reinfect the PC after it is cleaned, and possibly other PCs that connect to the same network drives. Any thumb drives infected with the trojan will spread it to other PCs the drive is connected to, which surprisingly has proved to be a particularly efficient vector to spread the code around.

University PCs should be set up to automatically install the latest malware “signatures” used by the campus anti-virus software eTrust whenever they become available. PCs that don’t conform to this practice should not be connected to the University network, nor should data be moved to a University computer without a virus check being done first.

We need to be more vigilant sharing data around, and when returning to the University campus it might be prudent to run a virus check on a PC before reconnecting it to the network.