IMPORTANT INSTRUCTIONS: Network Intrusion Emergency
Not Netsky.T Virus - Not An E-Mail Virus
A new worm/virus has begun spreading over the Internet and has already infected several computers. This worm does *not* spread over e-mail, it connects from computer to computer over the network. It can infect your computer if you run Windows and have no firewall and a "weak" Windows login password - easy to guess or otherwise simplistic.
This worm, once on your computer, seeks to spread to other computers, and furthermore scans your activity looking for passwords you use on Web sites. Once it finds any, it sends them outside to unknown attackers, who may attempt to use them.
In response, ISS is immediately shutting down portions of key enterprise systems, such as the Enterprise Accounting System, the Banner System (class registration, etc.) and the Student and Student Accounts Data Marts. These systems will remain inaccessible through the weekend.
IMPORTANT: It is critical that all GW community members follow the instructions below, in the order given:
1. Do not sign into anything over the Web until you have followed the steps below!
2. Change your Windows password.
3. On Windows XP turn on your Internet Connection Firewall. Right click on the "My Network Neighborhood/Places" icon and select your "Local Area Connection" then select the "Advanced" tab and click the box that says "Internet Connection Firewall." More instructions are available on the Helpdesk site at http://helpdesk.gwu.edu
4. Reset all of your critical passwords. If you have access to EAS, Banner, or Data Warehouse Systems, you must reset your password. It is also *highly* recommended to reset all other passwords including your GWMail E-mail password. You can reset your E-mail password at https://amc.gwu.edu. For links to password reset instructions for other systems see http://helpdesk.gwu.edu/helpdesk/news/sp04/change.win.passwds.040904.html
5. If you are not going to be using your computer please turn it off before you leave for the weekend.