Worm attack shuts off web access

By NATASHA HARRIS and REUTERS

New Zealand internet users were hit by the same international computer worm that shut down millions of worldwide internet users at the weekend.

Known as "SQL ("sequel") Slammer", the malicious programme targeted a previously identified weakness in Microsoft software to shut down powerful server computers.

Customers of local internet service provider Iconz could not use the internet for 30 minutes on Saturday evening after the worm created heavy congestion.

Iconz public relations manager Matthew Sollis said customers running Microsoft SQL Server 2000 on their servers were affected from 6.30pm on Saturday.

"People couldn't use the internet while others couldn't use their computers at all. But we isolated the problem in 30 minutes."

New Zealand's biggest provider, Xtra, was not affected. Marketing director Chris Thompson said a huge increase of data on the internet occurred on Saturday night.

"There was a huge amount of traffic flowing at 7.30pm but we managed to filter out the worm to stop the internet filling up."

Both providers advised that using "patches" to make an SQL server virus-free was the most effective way to prevent damage.

International experts called it the most damaging attack on the internet in 18 months as networks across Asia, Europe and America were effectively shut down.

The explosive spread of the malicious programme, whose origin was a mystery, nearly cut off internet providers in South Korea, disrupted automated bank teller Machines in the United States and made online surfing and email access difficult.

"It's very fast and very effective," said Alfred Huger, senior director of engineering at web security company Symantec in Cupertino, California.

About 150,000 to 200,000 servers had been compromised, said Vincent Gullotto, who heads Work Associates in Beaverton, Oregon.

The SQL Slammer worm targets servers that run Microsoft's SQL Server 2000 database software by exploiting a component used to access data that is also integrated into other programmes used for developing software.