Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Virus has had Vancouver school computers down for three weeks - so far
Macdailynews.com Vancouver Sun ^ | january 30, 2009 | Mary Frances Hill

Posted on 02/01/2009 11:42:01 PM PST by Swordmaker

Three weeks after a virus infected computers across the Vancouver school district, information technology staff are being forced to attend to thousands of computers individually - and still have a long way to go before the system is running efficiently.

The virus hit most computers in the school district on January 7. Since the virus replicates itself from one computer to the next, staff were instructed to shut down every computer in the school district.

"My understanding is we weren't the only ones to get it," said Vancouver School Board chair Patti Bacchus, who acknowledged repairs have taken much longer than expected.

"Getting IT workers from school to school has been a slogging process."

VSB spokesman David Weir said he doesn't know how many tech workers are working on the problem.

There are more than 10,000 computers in the district, each of which had to be shut down and disconnected from the network, then individually scanned and repaired if necessary, said Weir.

An online student forum by Point Grey secondary students identified the virus as Win32.Krap.b trojan, a bug that affects mostly Windows operating systems, shutting down computers as soon as users try to start them.

Noel MacDonald, a Westside parent of an 11-year-old who attends Bayview elementary school, said many computers in his son's school have been marked with a red dot, signifying that the machine is so old it wouldn't be able to withstand the anti-virus program.

MacDonald said the school's Parent Advisory Council had paid for a computer lab with Macintosh machines, which haven't been affected.

Mohammad Akif, security and privacy lead at Microsoft Canada, told the Vancouver Sun someone on one of the district's computers could have downloaded an e-mail attachment containing a virus, visited a corrupt website, or used a USB stick and unknowingly transferred corrupt files from a home to school machine. Once the virus enters a computer system, it can attach itself to e-mails and documents, Akif said.

"The teachers are really upset about it," said Anna Ward, a grade 12 student at Lord Byng secondary school.

Ward and her fellow students are expecting mid-term exams soon, and she said there's little information on how they'll receive them.

While many computers are now working at Lord Byng, so many learning resources are kept within the computer system that instructors have found it difficult to work.

"It's really affected the teachers, who have to do everything at home. They couldn't record any marks or attendance," said Ward.

Weir said all student and staff-related data is safe, and IT staff focused their first efforts on sites related to the curriculum, such as school computer labs.


TOPICS: Computers/Internet; Education
KEYWORDS: apple; macintosh; malware
Navigation: use the links below to view more comments.
first 1-2021-4041-6061 next last
MacDonald said the school's Parent Advisory Council had paid for a computer lab with Macintosh machines, which haven't been affected.

;^)>

1 posted on 02/01/2009 11:42:01 PM PST by Swordmaker
[ Post Reply | Private Reply | View Replies]

To: 1234; 50mm; 6SJ7; Abundy; Action-America; acoulterfan; aristotleman; af_vet_rr; Aggie Mama; ...
MacDonald said the school's Parent Advisory Council had paid for a computer lab with Macintosh machines, which haven't been affected. PING!


Macs are secure Ping!

If you want on or off the Mac Ping List, Freepmail me.

2 posted on 02/01/2009 11:43:58 PM PST by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

Win32.Krap.b — what an appropriate name.


3 posted on 02/01/2009 11:45:57 PM PST by MediaMole
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

“Noel MacDonald, a Westside parent of an 11-year-old who attends Bayview elementary school, said many computers in his son’s school have been marked with a red dot, signifying that the machine is so old it wouldn’t be able to withstand the anti-virus program.”

So, they’re more than two years old and they’re trying to install McAfee products on them, then? :P


4 posted on 02/01/2009 11:48:34 PM PST by Spktyr (Overwhelmingly superior firepower and the willingness to use it is the only proven peace solution.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

See! Even virus-writers don’t support Macs!


5 posted on 02/01/2009 11:51:30 PM PST by DuncanWaring (The Lord uses the good ones; the bad ones use the Lord.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: DuncanWaring

It’s not for lack of trying.

And the whole “there’s not enough Macs for them to go after” argument doesn’t work when people are writing viruses for cell phone operating systems with less than 200,000 possible victims. There are millions of Macs running OS X today.

As of yet, no successful OS X virus has ever been found in the wild. (Social engineering exploits do not count against ANY platform IMHO as the only OS that they need to succeed is the several million year old one between people’s ears.)


6 posted on 02/01/2009 11:55:11 PM PST by Spktyr (Overwhelmingly superior firepower and the willingness to use it is the only proven peace solution.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Swordmaker

**** iSnob PING!!!! ****


7 posted on 02/02/2009 12:16:35 AM PST by mkjessup (Jimmy Carter is the Skidmark in the panties of American History. Barack 0bama is his second term.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
I find it entertaining that the educated 'educators' in an entire school system don't have the combined intelligence to know how to isolate each work station to 'scrub' the virus. Also, I realize there's a little more to it to remove that virus from the server(s), but, shouldn't be that difficult to do it....geeze, no one in the Vancouver school system has an IT degree to help? Oppps. My bad.....24 days and nothing on...looks like a plea to scam more dough to upgrade. Why no AV on the systems to begin with?

I find such news entertaining....better that 'Everybody Loves Raymond' and 'Lost' combined..... heheheehehe.

8 posted on 02/02/2009 12:20:48 AM PST by RSmithOpt (Liberalism: Highway to Hell)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
Threat Report Info on This Trojan:

Looks like MS IE (plug-ins) is most susceptible for the trojan which is very malicious but doesn't seem to induce a high security risk:

Snippet and link to article if anyone is interested showing details for the bug:

o Submission received: 16 December 2008, 19:46:39

o Processing time: 5 min 38 sec

o Submitted sample:

+ File MD5: 0xDAD2CCF6919B794797B7E9C484A89A56

+ Filesize: 165,539 bytes

+ Alias:

# Trojan.Packed.NsAnti [Symantec]

# Packed.Win32.Krap.b [Kaspersky Lab]

# Generic PWS.ak [McAfee]

# Mal/Frethog-B [Sophos]

# PWS:Win32/Frethog.AJ [Microsoft]

# Trojan.Crypt.XPACK [Ikarus]

* Summary of the findings:

What's been found:

Downloads/requests other files from Internet. Modifies some system settings that may have negative impact on overall system security state.

Creates a startup registry entry.

Registers a 32-bit in-process server DLL.

Registers a Browser Helper Object (Microsoft's Internet Explorer plugin module).

Contains characteristics of an identified security risk.............

9 posted on 02/02/2009 12:37:04 AM PST by RSmithOpt (Liberalism: Highway to Hell)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Spktyr
(Social engineering exploits do not count against ANY platform IMHO as the only OS that they need to succeed is the several million year old one between people’s ears.)

One of my favorite notations on helpdesk reports: PEBCAK.
.
.
.
.
.
.
.
.
.
.
.
.
.
Problem Exists Between Chair And Keyboard.

10 posted on 02/02/2009 12:47:09 AM PST by ReignOfError
[ Post Reply | Private Reply | To 6 | View Replies]

To: Swordmaker

Or even better, if they were running Ubuntu - it’s free and like Macs, no anti-virus is required.
And it’s free!


11 posted on 02/02/2009 3:10:29 AM PST by mkleesma (`Call to me, and I will answer you and tell you great and unsearchable things you do not know.')
[ Post Reply | Private Reply | To 2 | View Replies]

To: ReignOfError

Or PICNIC “Problem In Chair, Not In Computer”. Heh.

I love Linux. Linux would’ve avoided this as well as a Mac, for no cost but those “IT” guys.


12 posted on 02/02/2009 3:10:59 AM PST by Big Giant Head (I should change my tagline to "Big Giant penguin on my Head")
[ Post Reply | Private Reply | To 10 | View Replies]

To: Swordmaker

“Mohammad Akif, security and privacy lead at Microsoft Canada...”

And they’re wondering how the problem originated...


13 posted on 02/02/2009 3:21:10 AM PST by BobL
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker
It's not a very virulent bug. The incompetence of the 'IT' personnel should be the headline. Some of these machines:

Noel MacDonald, a Westside parent of an 11-year-old who attends Bayview elementary school, said many computers in his son's school have been marked with a red dot, signifying that the machine is so old it wouldn't be able to withstand the anti-virus program.

If they can't afford new PCs I doubt they're going to go with Macs, unless this is an internal 'stunt'.
14 posted on 02/02/2009 3:38:14 AM PST by allmost
[ Post Reply | Private Reply | To 1 | View Replies]

To: Swordmaker

You don’t need a Mac. Just load Linux.


15 posted on 02/02/2009 3:41:43 AM PST by AppyPappy (If you aren't part of the solution, there is good money to be made prolonging the problem.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: allmost
If they can't afford new PCs I doubt they're going to go with Macs, unless this is an internal 'stunt'.

In that case Linux is the answer.

16 posted on 02/02/2009 4:50:51 AM PST by Tribune7 (Obama wants to put the same crowd that ran Fannie Mae in charge of health care)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Tribune7

Linux would run great on those older boxes. They wouldn’t even need to upgrade the hardware in most cases. A simple, inexpensive solution.


17 posted on 02/02/2009 4:58:10 AM PST by allmost
[ Post Reply | Private Reply | To 16 | View Replies]

To: rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; JosephW; ...

18 posted on 02/02/2009 6:01:25 AM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Spktyr
So, they’re more than two years old and they’re trying to install McAfee products on them, then? :P

A locked-down computer with automatic updates installed shouldn't need anti-virus software.

If they were all booting off a standard configuration, and if they didn't have local access to hardware [e.g. no ability to boot to floppy or boot to cd-rom] and if they had Active Directory [or Novell Directory Services] policies which locked down the access to the innards of the box, then none of this stuff could happen.

The very fact that staff had to physically visit each and every computer [instead of being able to remote-reinstall each computer] indicates to me that this was a haphazard, slipshod environment where a catastrophe was just waiting to happen.

19 posted on 02/02/2009 6:22:45 AM PST by KayEyeDoubleDee
[ Post Reply | Private Reply | To 4 | View Replies]

To: Swordmaker; GMMAC; Clive; exg; kanawa; backhoe; -YYZ-; Former Proud Canadian; Squawk 8888; ...

20 posted on 02/02/2009 6:33:09 AM PST by fanfan
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-6061 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson