COT Security Alert - w32/sdbot.worm.gen Virus

From: Hanna, Kathy (COT)
Sent: Monday, February 12, 2007 4:26 PM
To: COT Constitutional CIO Security Contacts; COT Cabinet CIO Security Contacts; COT Commonwealth Technology Council

Cc: COT Exchange Administrators; COT Security Alert Contacts; COT Security Contact COT-Support; COT Security Contact Pass; COT Security Contact Self-Support; COT Technical Contacts; SecurityContacts Group

Subject: COT Security Alert - w32/sdbot.worm.gen Virus

COT Security Alert


A new variant of a virus currently being detected as w32/sdbot.worm.gen has been found in the Commonwealth’s network. Agencies need to be sure that they are running the latest McAfee 8.0i (or 8.5i) software and a DAT file of 4961 and the current 5100 engine.

It is extremely important that the DAT file released today (4961) be applied as soon as possible. This will help to contain the infection from recurring or spreading further throughout the network. A complete scan of each computer, including ZIP files, must be done to ensure no virus infections are present. For further help or information, please contact your local network administrator.

A service call may be arranged with external support personnel at the agency’s expense. Or Accent\Prosys, a consultant under statewide contract, can be contacted for assistance at 1-800-726-7657 ext. 402. In addition, COT can make a CD with the software updates available.

Sites that do not have a current antivirus license may purchase McAfee Anti-Virus and Anti-Spyware from COT for $10.82 per device for a license and support through 6/30/2008, or purchase virus software elsewhere. Please contact COTMcAfeeCoordinator@ky.gov or see the COT Anti-Virus webpage at http://technology.ky.gov/security/mcafee_info.htm for further McAfee information.

If you have any further questions, contact COTSecurityServicesISS@ky.gov.

NOTICE: COT is providing this information so that you are aware of the latest security threats, vulnerabilities, software patches, etc. You should consult with your network administrator or other technical resources to ensure that the appropriate actions for these alerts are followed. If you are a network administrator and need additional information, please call the Help Desk at 502.564.7576.


Security Administration Branch
Division of Technical Services
Commonwealth Office of Technology
1266 Louisville Rd., Perimeter Park
Frankfort, KY 40601
Phone: 502.564.5274
COTSecurityServicesISS@ky.gov
http://ky.gov/got/security/