RESCUECOM CEO Quoted About Hype Surrounding Worm Scare

Hype May Have Prevented Computer Issue from Becoming Larger

February 3, 2006
By ANICK JESDANUN, AP Internet Writer:


Experts: 'Hype' May Have Mitigated Worm

Companies and individuals heeded this week's warning -- some may call it "hype" -- about a file-destroying computer worm known as "Kama Sutra," helping minimize its damage Friday, security experts said.

One Italian city shut down its computers as a precaution, but otherwise the worm's trigger date arrived with relatively few reports of problems.

For days, experts warned that the worm could corrupt documents using the most common file types, including ".doc," ".pdf," and ".zip." It affects most versions of Microsoft Corp.'s Windows operating system, prompting the software giant to issue a warning Tuesday.

Hundreds of thousands of computers were believed to be infected, but security vendors say many companies and individuals had time to clean up their machines following the alarm, carried by scores of media outlets including The Associated Press.

"Certainly, right now, we and our anti-virus partners are not seeing a widespread impact of this attack," said Stephen Toulouse, a Microsoft security program manager.

For Milan, Italy, though, the discovery came too late. Technicians switched off 10,000 city government computers after discovering the infection Thursday and deciding they didn't have enough time to clean the machines.

"It has spread to all our computers," said Giancarlo Martella, Milan's councilman for technological innovation and public services. "Knowing how destructive it is, we turned off all personal computers to avoid losing our data."

Only the municipality's registry office had been kept open because its "passive terminals" don't store data, Martella said, adding he hoped the computers would return to normal by Monday.

Unlike other worms generally designed to help spammers and hackers carry out attacks, Kama Sutra sets out to destroy documents by overwriting data.

The worm -- called "CME-24" but nicknamed after the Hindu love manual Kama Sutra because of the pornographic come-ons in e-mails spreading it -- also tries to disable anti-virus software, but vendors have generally posted updates that should protect users.

Assuming the computer's calendar settings are correct, users can also avoid the worm by leaving their machines off until Saturday, although the worm is set to trigger again on March 3.

Security vendors Trend Micro Inc. and CA Inc. both assessed the overall risk and distribution as low. The worm wasn't designed to spread any more quickly Friday. Rather, Friday was the first trigger date for the file-destroying code.

Ajit Pillai, India's manager for U.S. security firm Watchguard Technologies Inc., said about 10 percent of his customers in the country had the worm, but they "followed the remedies and managed to avoid any problem."

"We didn't have to do any firefighting today," Pillai said.

So was the public bamboozled by the warning?

Hardly, experts say.

"The importance of media attention from an awareness and educational standpoint has been a very good thing," said Marc Solomon, director of product management at security vendor management McAfee Inc. "It alerts users to what may have happened and the destruction that could have occurred."

Call it hype if you wish, but "the hype was probably what prevented the disaster from happening," said David A. Milman, chief executive of the Syracuse, N.Y.-based Rescuecom.

He said his U.S. computer-repair chain initially saw a 20 percent increase in call volume, but mostly from customers seeking reassurance.

Security experts benefited from advance warning. The worm has been circulating for weeks but is set to destroy files only on the third day of each month. That gave vendors time to update their products and warn customers.

It's possible virus writers next time will have the file destruction start immediately, but that could also blunt a worm's ability to spread, said Ken Dunham, director of the rapid response team for VeriSign Inc.'s iDefense.

If files get wiped out right away, "you would notice that immediately, and people would start mitigating it," Dunham said. "If you let it build up, there's a much (greater) chance of spreading."

* __

Associated Press writers Ariel David in Rome, Sylvia Hui in Hong Kong, S. Srinivasan in Bangalore, India, and Doug Esser in Seattle contributed to this report.

Copyright © 2006, The Associated Press

Google Reviews

Keoni Jefferson
Keoni Jefferson
in the last week
When I say, I am truely expressed. David and his team are a blessing in disguise. I was just hired f
...When I say, I am truely expressed. David and his team are a blessing in disguise. I was just hired for a work at home postion. My compter had several, multiple virues. David stayed with me over the phone to fix, and resolve the issues. His personality and the ability to show me what not to install, was comforting. I'm greatly appreciative of RUSCUECOM. less
Sheila O'connor
Sheila O'connor
a week ago
When I called my compute was completely dead. Going away on Sunday and needed to have access to my c
...When I called my compute was completely dead. Going away on Sunday and needed to have access to my computer to get emails out before I left. I talked with T and she was very pleasant and understanding. Take all my information and had tech David call me back. Davis was so awesome and worked with me to get to the point were he could take over my machine. I am so thankful for David he was patience, understand, working with me. He went above and beyond to ensure me that everything will be okay and he would work all night if he had to get my computer fixed. I worked as a supervisor, office manager for many years, I would have been delighted to have David on my team. Once again I am thankful I gave rescue Com I have never any problems with any of the techs. I really appreciate David approach to customer service. Once again he was AWESOME! less
Katie Chuong
Katie Chuong
2 weeks ago
David is awesome!! He is so patient with all my issues and caring and I would definitely recommend t
...David is awesome!! He is so patient with all my issues and caring and I would definitely recommend this 5 star company to everyone, friends and family! less
Karen Gutfeld
Karen Gutfeld
a month ago
These guys are very helpful and know what they are doing. I am a complete dummy when it comes to tec
...These guys are very helpful and know what they are doing. I am a complete dummy when it comes to tech matters and David always walks me through it patiently so that in the end my problem is solved. Very appreciated. less
View all Google reviews

Featured in:


Feature Inthe New York TimesFOX NEWSUSA TodayComputer WorldCNNForbes