Back to main Archive News page.
W32.Kelvir.AF Worm Virus
The 'security incident' on 01-06 April was identified as the W32.Kelvir.AF worm virus. Symantec/Norton AntiVirus does detect this virus, but you MUST ensure that your virus definitions are dated 20/04/05 or later. Do NOT open any unexpected attachment/file you receive and do NOT click on any unexpected 'link' while using MSN Instant Messenger. If you think you have been affected by this virus ring the ISS Service Desk on x10987.
Friday 01 to Wednesday 06 April 2005 - Central Files Down Time
Following the serious security incident on Friday 1/04/05, the central file servers that holds H: drive files had to be shut down to protect University data systems. A substantial amount of rebuilding and repair has been carried out with ISS working continuously to restore systems to full service. During the last 24 hours the service has been progressively restored.
All users should now be able to access 'H: Drive'.
For users whose H: drive is on the FILES1 server ONLY, any files created or modified between 2am and 12noon on Friday 01/04/05 will not have been backed up, and thus cannot be restored from the back-up system.
Staff and postgraduates using the "ISS Managed XP PC" will find any files created since 12noon on 01/04/05 and saved to My Documents will now be synchronised to the H: drive on FILES1. In very rare cases, during this synchronisation a recently created file may be deleted; if you believe that you have been affected, contact the ISS Service Desk on 10987 immediately.
Users with H: drive on FILES2:
There has been no reported data loss for these users.
Users of Departmental filestore on FILES2:
There has been no reported data loss.
System Performance - Background scanning and data safety checks are being carried out on both FILES1 and FILES2, so for the next few days, PCs may be slower than usual when booting and logging on.