'Witty' virus entertaining few university computers
The Witty worm virus has attempted to wiggle into campus computers equipped with the BlackICE firewall program, but infection has been confirmed in only three machines. Of the almost 2,000 computers equipped with the protection software, about 20 to 30 have been suspected of infection, while three computers have had hard drives destroyed by the Witty worm. The MSU Computer Store has sold about 1,500 individual licenses - mostly to students - and 300 departmental licenses of the BlackICE firewall software program, said Tom Davis, Director of Academic Computing and Network Services. Thomas said he was informed by a BlackICE salesperson that an average of 2 percent of software users became infected by the worm, and MSU seems to be less than that average. The worm can erase hard drive information while resting in a computer's memory, enabling it to hide from virus scan systems. Senior Information Technologist Richard Wiggins said the reason for the low number of infections could be the worm's lack of effectiveness. "It looks like Witty is pretty good at knocking on your door but not good at getting in," he said. Wiggins said the virus worm attempts to mask itself by changing its size before sending a copy to infect another computer.