Thursday, September 11, 2003

If you receive an e-mail warning about a virus threat referring to The World Trade Center, WTC, 9/11 or "WTC Survivor" ignore it and relax.

The chances of a debilitating date-activated virus attack of this strain are zero, say computer experts.

But a high-risk virus may also act up any day, according to McAfee, a computer security company. McAfee recently listed one high-risk, two medium-risk and six low-risk threats to network computers. The supposed WTC virus is nowhere in the list of new or recurring threats.

The anti-virus community considers the warning of a "WTC" worm as a hoax. But it is one of the most widely circulated among the 100 or so hoax virus attacks, which even has a Hungarian version.

The warning in big, bold letters reads: "For those who don't know, 'WTC' stands for the World Trade Center. Really dangerous because people will open it right away, thinking it's a story relating to 9/11. Big trouble."

The originator of the warning urged people not to open the "WTC Survivor", claiming that it contains a self-replicating programme that will erase the entire "C" drive of a computer.

"Forward this to everyone in your address book... I would rather receive this 25 times than not at all? if you receive an email called 'WTC Survivor', do not open it. Delete it right away! This virus removes all dynamic link libraries (.dll files) from your computer," the emailed warning reads.

A technical expert from Microsoft at Dubai Internet City told Gulf News that he did not know of any imminent threats of a virus attack today, the second anniversary of the terror attacks in the U.S.

According to him, all the system administrators of Internet servers have taken the precautionary measures against any time-activated virus attacks.

Mohammed Hallak, IT manager of Virus FZ LLC, a Dubai software development company, said: "'WTC Survivor' is definitely a hoax. We don't know of any other threats of a virus or Internet worm attacks associated with 9-11."

Virus FZ LLC, based in Dubai Media City, offers corporate anti-virus protection. Hallak said the best protection against viruses is to constantly update one's virus protection system.

Using the date as a triggering mechanism for a computer virus is easier to detect, explained Hallak. Anyone who wants to check the presence of a virus that will be activated at a certain date has to simply set the internal clock of his or her computer to a particular date.

"If there's a virus, it will be activated. Therefore, a precautionary measure can be done easily by installing a firewall or anti-virus software. People who have a big network can take a risk with one computer by changing its internal clock to a suspected date. And if something happens on that computer, the IT expert will know of the presence of a threat."

The only virus attack related to 9-11 was reported by Trend Micro on September 24, 2001, ostensibly carrying a message of peace with a subject line that read, "FW: Peace between America and Islam". But Trend Micro said it received just one report of infection, and never confirmed any further attacks.

FIREWALLING

How to circumvent an Internet raid

- Use anti-virus software and keep it updated

- Use a firewall- Check security settings- Conduct routine security maintenance - Turn off "always on" connection when you don't need to be online.- Do not open any files attached to an e-mail if the subject line is questionable or unexpected- Delete chain e-mails and junk e-mail - Do not download any files from strangers- Be cautious when downloading files from the Internet

Strains that stalk the Web

High risk: W32/Sobig.f@MM Medium risk: W32/Dumaru.a@MM ; W32/Lovsan.worm.a Low risk: W32/Randon.worm.p; W32/Eyeveg.worm; PWS-Wincap; PWS-Wincap.dr; Hurri; JS/Exploit-ActXComp

'Source: McAfee website

Gulf News