Wed, Aug 13, 2003 Bookmark and Share eMail this Article Send Print this Article Print Media Kit Reprints RSS feeds RSS
Computer worm exploits Windows flaw, snarls networks

 

Primary Topic Channel: 

 

Educators who use Windows-based computers at school or at home have an urgent new reason to patch a serious flaw that was discovered in nearly all versions of Windows last month: An internet-borne infection incapacitated tens of thousands of computers Aug. 12, snarling company networks and frustrating home users as it spread across the globe.

Security officials said the virus-like worm, dubbed "LovSan," was part of a coordinated electronic attack that exploited one of the most serious flaws yet discovered in Microsoft Corp.'s Windows operating systems.

Maryland's Motor Vehicle Administration shut all its offices at noon as technicians cleaned the agency's network systems.

"There's no telephone service right now. There's no online service right now. There's no kiosk or express office service," spokeswoman Cheron Wicker said. "We are currently working on a fix and expect to be operational again in the morning."

The worm, which causes computers to mysteriously restart, was first reported in the United States on Aug. 11 and, while appearing not to delete files or otherwise incur permanent damage, knocked many computers offline. Non-Microsoft systems were not vulnerable.

Across Asia and Europe, it struck many businesses as they opened and workers logged on, spreading even without the need for user intervention.

Graham Cluley, a senior technology consultant with Sophos PLC in Britain, said his company started getting reports about the infection from Australia and then Europe.

In Sweden, internet provider TeliaSonera said about 20,000 of its customers were affected after the infection clogged 40 servers that handled internet traffic. Spokeswoman Lena Rosell said customers had their service restored by late morning.

Denmark initially reported limited problems, but "the tendency is rising, and we're getting more reports of attacks," said Preben Andersen, head of Denmark's official virus watchdog agency, DK CERT. "There must be at least a couple of thousand PCs infected with this worm."

Among companies affected in Germany was automaker BMW, said spokesman Eckhard Vannieck. The problems did not affect production, and the company expected it to be fixed by day's end.

Computers infected by LovSan were programmed to automatically launch an attack Saturday, Aug. 16, on windowsupdate.com, a web site Microsoft uses to avail customers of software patches that can prevent such infections.

The infection was dubbed "LovSan" because of a love note left behind on vulnerable computers: "I just want to say LOVE YOU SAN!" Researchers also discovered another message hidden inside the infection that appeared to taunt Microsoft Chairman Bill Gates: "billy gates why do you make this possible? Stop making money and fix your software!"

Microsoft had posted a free patch on the web site to protect Windows users after it warned on July 16 about the flaw (see "Microsoft warns of critical flaw in nearly all Windows software," http://www.eschoolnews.com/news/showStory.cfm?ArticleID=4514). Nearly all versions of Windows are affected.

 
Continued
Pages: 1 2 | Next ››
 
 

Comment now.

Don't forget to check out our Online highlights:
- Discover new resources that help school leaders strengthen their school district inside our new Superintendents Center.
Go to http://www.eschoolnews.com/news/superintendents-center/
- View this week's Student Video News Cast at www.eschoolnews.tv where you can also upload video too!
- Follow eSchool News on Twitter at http://twitter.com/eschoolnews
- Add our RSS feeds or our new widgets to any school web site. Go to http://www.eschoolnews.com/content-exchange-rss/
- Find the latest news in the current issue of eSchool News. Go to http://www.eschoolnews.com/current/

 

You need to be registered at eSchoolnews.com to add your comments. If you do not have a username / password please register here ! Registration is very simple and will not take much time!

 
Already registered? Login:
Username:  Want to know more?
Registation Benefits
Password: