On Thursday morning, John, an XYZ university employee, noticed a warning message on his computer saying that the system has been attacked by a worm Win32.VB. Even though the antivirus software was present in the system, the software failed to detect the new worm because it was not updated to the latest version. When John tried to open his e-mail, he experienced a slow internet connection. He noticed there were some unusual file names in the disk. John immediately informed his friend Bob, who was also an XYZ employee, of the problem. Bob checked his computer in his office and experienced the same problem as John. John and Bob checked several computers in the laboratories, and found that Win32.VB worm had infected many other computers in the laboratory. They contacted the system administrator of the XYZ University. The system administrator checked the computers in the laboratory and reported the incident to the incident response team. The system administrator also checked the computers in other laboratories. As a result of the worm attack the activities in the XYZ University laboratory were suspended for a day, which caused a great inconvenience.Required:Suggest measures to contain and recover from the incident. Suggest actions to improve the detection of similar events.?

The system administrator should update the antivirus software and scan the full computer with antivirus to detect and remove this worm from the system. In future, make sure the antivirus is up to date so that it can detect the worm attack easily.

Explanation:

Wind32.VB is the virus that attacked on the computer system and affect the system by self executing capability. In case there is no antivirus software or antivirus software is not up to data then this virus affect the performance of the system. It can change different settings of the data and folders that may cause to lose the data.

To save from this virus attack, an antivirus should be installed and need to be updated every time. This can reduce the risk of above mentioned malware. If the system is under attack of this virus, so make your antivirus up to data and scan your full system for detection and removal of this virus from different drives and folders of the computer.

To avoid these types of incidents in future, keep the antivirus up to data. so that it can detect the virus attack and stop it from affecting the performance of the system.