A new computer virus that spreads through e-mail attachmentsappeared on campus sometime Monday — before the University’santi-virus server was updated.
The virus, W32.Beagle.AG@mm, is a worm that launches when a useropens the e-mail’s attachments. The worm uses the e-mail addressescontained on the infected machine to find new computers to target.It only affects computers with the Microsoft Windows operatingsystem.
“This virus has caused a tremendous amount of confusion andheadaches — not only here at LSU, but worldwide,” said JoelWilliams, assistant director of Computing Services.
Many University students received the e-mail containing thevirus on Tuesday. In most cases, the sender appeared to be a fellowUniversity student and the word “Re:” was contained within thesubject line. The text of the message contained two fileattachments, “ytmffwqawf.gif” and “New_Mp3_Player.zip.”
A “.gif” file is typically a picture file and a “.zip” file istypically a file format used to compress multiple files into onefile. Once “unzipped” the program can be launched on the machine.In this case, clicking on either attachment would launch thevirus.
Computing Services put out a warning about the virus on theUniversity’s Web site Tuesday, referring anyone who has opened thise-mail to Computing Services’ HelpDesk and to Symantec, publisherof the Norton Anti-Virus software franchise.
On its Security Response Web site, Symantec callsW32.Beagle.AG@mm a “mass-mailing worm.”
“The subject line, body, and attachment name of the e-mail vary.The attachment will have a .com, .cpl, .exe, .scr, or .zip fileextension,” the Web site said.
Aside from mass-mailing, the virus is a threat because itdisables anti-virus software and allows unauthorized remote accessto an infected machine.
“If you’ve opened it up and looked at [the e-mail andattachments], you need to run a [virus] scan tool,” Williams said.”There are several tools available online. The best thing you cando is run a removal tool like Stinger.”
McAfee, another anti-virus vendor, publishes Stinger. It is autility used to detect and remove specific viruses.
Williams said the most important thing users can do is takepreventive measures against infection.
“Keep your system up to date, and don’t open any e-mails thatyou are unaware of the sender and its contents,” he said.”Certainly don’t open attachments if they don’t look right.”
Willams said users need to install Microsoft Windows systemupdates and use anti-virus software. Norton Anti-Virus is availablefree to students through PAWS.
The Stinger virus-removal tool can be found onhttp://us.mcafee.com. If University computer users have continuingproblems, Williams said they are urged to call Computing Services’HelpDesk at 578-3375.