There has been a significant increase in virus activity on campus this week. Computers suspected of being infected have been denied access to the Cal Poly network. The machine addresses (MACs) of campus computers that have been blocked are posted online at http://blocked.calpoly.edu.

Computers running older Windows operating systems such as NT and 2000 are most vulnerable to attack by this and similar worms. Upgrades to these operating systems are available at no cost via the CSU-Microsoft Agreement for on-campus state-owned computers only. For more information, go to http://software.calpoly.edu. Students, faculty and staff can purchase CDs from El Corral Bookstore for home computer use.

Once it infects a computer, the W32.Spybot.Worm poses a serious threat to other computers. It can be difficult if not impossible to remove and may result in a computer needing to be completely reimaged to eliminate the effects of the worm.

Campus technical support staff have been advised on how to resolve the problem. Faculty and staff should contact their LAN Coordinator for assistance. To locate the LAN Coordinator for your area, check the Support Contacts by Department list at http://servicedesk.calpoly.edu.

Students and home computer users can check their own computers using the Microsoft Baseline Security Analyzer (MBSA) which is available online at: http://www.microsoft.com/technet/security/tools/mbsahome.mspx

Technical information about the W32.Spybot.Worm can be found at: http://www.symantec.com/security_response/writeup.jsp?docid=2003-053013-5943-99

If you have any further questions, please visit the ITS Service Desk web site at http://servicedesk.calpoly.edu or call 756-7000.

"Patch early, patch often!"