Backdoor Sdbot / W32/Rbot-AVQ Spyware Worm
Backdoor Sdbot / W32/Rbot-AVQ Spyware Worm is on campus. It affects Microsoft Windows operating systems by taking advantage of weak or non existent system passwords. Once a computer is infected it allows others to access the computer, reduces system security, changes the password, records keystrokes and installs itself in the Registry. The spyware worm spreads through network shares.
You are strongly encouraged to use strong passwords. Protect any account with root or system administrator privilege by following recommended password practices using strong passwords. Do not use defaults passwords as received from the vendor. Passwords should not be written down on notes attached to a keyboard or monitor or left in an unlocked desk drawer. All passwords should be changed regularly. Passwords protecting privileged accounts should be changed more frequently. A strong password must:
- be as long as possible (never shorter than 6 characters); include mixed-case letters, if possible;
- include digits and punctuation characters, if possible;
- not be based on personal information (names or initials of family members or pets, birthdates, license plate, phone numbers, etc.) that would make it easy to guess;
- not be based on any dictionary word (in any language);
- not be based upon any form of the account name.
Samples of the worm have been sent to Norton. Norton will detect the worm as Backdoor-Sdbot. At this time the instructions for cleaning are manual.
Norton recommendation and removal instructions:
http://securityresponse.symantec.com/avcenter/venc/data/
backdoor.sdbot.gen.html#recommendations
http://securityresponse.symantec.com/avcenter/venc/data/
backdoor.sdbot.html#removalinstructions
Notice
Upgrade your MAC ID password today
McMaster is strengthening its password system and all MAC ID passwords established before February 19, 2013 must be changed.
- Upgrade before
May 29, 2013
Service Desk
| Hours: | Monday - Friday 8:30 am - 4:30 pm |
|---|---|
| Phone: | 905-525-9140 x24357 (2HELP) |
| Email: | uts@mcmaster.ca |
| Location: | Main Campus BSB Rm. 245 |
| Service Catalogue: | |
| http://www.mcmaster.ca/uts | |
Service Bulletins
- There are no Service Bulletins at this time