Please enable javascript to view this page in its intended format.

Queen's University
 

Virus - Greeting Card


The Greeting Card Virus is spreading quickly across campus!


It arrives as an email purporting to be an ecard from Hallmark, American Greetings or some other source.  If you open the email's attachment your computer will be infected.

  • the virus creates a registry entry that will run each time your computer is turned on
  • connects to a web site to identify the IP address of the infected computer.
  • scans your computer for email address and sends a copy of itself to the email addresses found
  • creates copies of itself on removable drives and runs whenever the drive is accessed

Operating Systems affected are:

  • Windows 2000
  • Windows 95
  • Windows ME
  • Windows Server 2003
  • Windows XP
  • Windows Vista
  • Macintosh Computers running a windows partition

What can you do to protect yourself

  • do not open the attachment
  • delete the message and "empty your trash"
  • make sure your anti-virus software is up-to-date

Think you might have the virus?

  • remove your computer from the network.  To do this, unplug your ethernet cord and/or turn off your wireless card.
  • use System Restore to roll your computer back to a restore point before it became infected.  This is ONLY a first step.
  • DO NOT attempt to backup any files to removable storage devices. This virus has the ability to infect removable devices such as USB keys and external hard drives. As soon as you plug in one of these devices, the virus will copy itself onto the device. Any computers that you plug this device into will also get infected with the virus. We are currently working on this issue.
  • Contact the IT Support Centre to have the virus cleaned from your computer. 
    Note:  The IT Support Centre is accepting systems into the queue.  There is a minimum 5 business day wait for the system to be fixed but all systems will be handled on a first come first serve basis.  

Kingston, Ontario, Canada K7L 3N6 613.533.2000