Europe South Asia Asia Pacific Americas Middle East Africa BBC Homepage World Service Education



Front Page

World

UK

UK Politics

Business

Sci/Tech

Health

Education

Sport

Entertainment

Talking Point

In Depth

On Air

Archive
Feedback
Low Graphics
Help

Tuesday, June 15, 1999 Published at 17:15 GMT 18:15 UK


Sci/Tech

Computer virus takes its toll

Keeping computers safe is becoming harder

The problems caused by the computer virus Explore.Zip appear to be increasing, as it reveals new, unwelcome tricks.


Aled Miles of Symantec: "Our phones have been red-hot"
Anti-virus software companies are reporting an increase in calls to them compared to Friday, the first day of the epidemic in Europe and the US. The virus has also spread to the Far East and South America.

It has also become apparent that the virus, which destroys files, scans computers for network connections and exploits these to cause further damage. This means all files on shared drives are in danger if only one connected computer activates the virus.

"It only takes one infected computer to rapidly spread within a company," said Mark Zajicek, a member of the Computer Emergency Response Team at Carnegie Mellon University, US. "That helps explain what we've been seeing - that the program wasn't spreading from site to site as quickly as it was within a site."

Friend and foe

The main method of virus infection was initially a seemingly friendly e-mail that tricked the recipient into opening an infected file and starting the virus program.

But the researchers at Carnegie Mellon found that the virus would reappear seconds after being removed from a computer - if that machine was linked to another infected machine.

It is now likely to take weeks rather than days to conquer the virus says Dan Schrader at Trend Micro, a maker of anti-virus software.

But he admitted it was "a very complex bit of code" and even his own company fell prey to the virus.

False sense of security

The virus propagates in the same way as the Melissa virus that infected computers worldwide earlier this year.

It uses your e-mail address books to send itself to people you correspond with. They get a personalised message which appears to come from you.


[ image: What to look out for: the deceptively friendly email]
What to look out for: the deceptively friendly email

This can give people a false sense of security, leading them to forget a golden rule of virus protection - do not open files unless you are certain where they have come from.

Unlike the Melissa virus, the Explore.Zip virus carries a destructive payload. It not only destroys Microsoft software files including Word, Excel and Powerpoint files but also several types of programming code files (*.c, *.cpp, and *.asm) which are much harder to replace.

No normal recovery

Furthermore, Catherine Hampton from the alt.comp.virus newsgroup says that "it deletes files in a special way which means they can't be recovered by any of the normal file undelete or file recovery software available."

Computers which use alternatives (e.g. Linux) to Microsoft operating systems are not affected by the virus.

The impact of the virus on the many businesses affected is still being assessed. But the cost of recovering or replacing lost data, disinfecting computer systems and lost working time is likely to be huge.

Malicious viruses are becoming a regular burden on businesses and police authorities are putting a lot of effort into tracing the creator of Explore.Zip.

The people behind the recent Melissa and Chernobyl viruses were quickly caught, but there is no reported progress in the current case.





Advanced options | Search tips




Back to top | BBC News Home | BBC Homepage | ©


Sci/Tech Contents


Relevant Stories

27 Apr 99 | Sci/Tech
Chernobyl virus causes Asian meltdown

09 Apr 99 | Americas
Melissa case opens

15 Jun 99 | Sci/Tech
'Trojan horse' program steals passwords

02 Feb 99 | Sci/Tech
Computer virus sparks fireworks

31 Jul 98 | Sci/Tech
Invasion of the killer e-mail viruses





Internet Links


Explore.Zip information

Symantec Explore.Zip Removal

Trend Micro Inc

Network Associates

DataFellows


The BBC is not responsible for the content of external internet sites.




In this section

World's smallest transistor

Scientists join forces to study Arctic ozone

Mathematicians crack big puzzle

From Business
The growing threat of internet fraud

Who watches the pilots?

From Health
Cold 'cure' comes one step closer