Following the scheduled electrical testing at Chantry Court earlier today, ResNet isn't working for up to 80 people at Chantry Court on floors 6-8. Those on other floors are working OK.

We've already been out to Chantry Court to try to fix it but weren't successful. It looks as if part of our equipment has broken and we need to swap it for a replacement. We're very sorry about the problem and are working to get it fixed as soon as possible, but unfortunately that won't be until tomorrow morning (Tuesday 16th).

Update: Tuesday 16th, 09:50am
We have successfully installed a replacement switch, and service has been restored to Chantry Court.  We apologise for the inconvenience caused by this outage.

10.20am Monday 2nd February: ResNet is currently unavailable in one wing of Unite House & a few rooms of the Hawthorns. This is due to power problems over the weekend - some of the ResNet equipment didn't come back properly when power was restored. We're sending people out to Unite House & The Hawthorns now to get it fixed as soon as possible.

Update 11.10am: ResNet is now back on in all parts of Unite House & The Hawthorns.

We're very sorry for the interuption over the weekend, and the obvious inconvenience caused to students in the affected areas. Although we have 24/7 help desk support we don't have out of hours technical cover on the ground. When problems occur over the weekend they take much longer to resolve.

Are you a resident at Langford using ResNet? If so you probably need to renew your subscription for this term. Most ResNet subscriptions at Langford expire Tuesday 20th January. To check when your subscription expires you see www.resnet.bristol.ac.uk/myresnet

As Langford is many miles from the main university precinct we've made it easier for students at Langford to pay. Please see Sandra Sweeting at Langford during her office hours, 8am-2pm Monday-Friday. Sandra has application forms for you to fill in and can take payment by cash.The cost varies depending on which ResNet package you want and how long you are staying. The most popular options are £22 for one term or £44 for two terms.

In addition if you prefer you can also print out an application form and post it to us with a cheque, or pay at the Computer
Centre by cheque cash or card.

These are temporary arrangements - later in the year we will be introducing a new ResNet online payments system for use at Langford and elsewhere.

Microsoft have released a beta (preview) version of Windows 7, the replacement for Windows Vista. We've already had a few queries from students wanting to use it on ResNet. For the moment, please do not install Windows 7 on your computer and connect it to ResNet. It won't work (the ResNet security checker won't pass it). This beta version is not intended to be a primary operating system for everyday use. Essential updates and security fixes aren't released or are released late for Windows 7.

We will of course be supporting Windows 7 when it is released but there is no release date for it as yet. For now if you have a real need to install Windows 7 there are other options, such as installing it on a virtual machine instead of as your main system.

Please read on for an important message to all ResNet users - even if you’ve left Bristol for the Christmas vacation.

Shortly before the end of term we had an outbreak of a nasty virus on ResNet, called DNSChanger. DNSChanger hijacks your Internet settings and redirects your traffic to malicious websites under the control of the attacker. For example, you might think you are going to Google, but actually you are going to a malicious website which will take control of your computer, try to steal your credit card numbers and bombard you with adverts. The virus spreads by passing on malicious configuration information to other computers on the same local network, like ResNet.

Even if you’ve left Bristol, please check now to see if your computer has a problem with this virus:

1. Click Start (then Run in Windows XP), then type cmd in the box. A black command window should open.
2. In the black command window type nslookup google.com
3. Something like the following should be displayed:

Server: newsapphire.resnet.bris.ac.uk

Address: 137.222.223.236

Non-authoritative answer:

Name: google.com

Addresses: 209.85.171.100
72.14.205.100
74.125.45.100

We’re interested in the numbers on the second line (137.222.223.236 in our example). If you are on ResNet then these should start with 137.222 (the range for University of Bristol). If you are at home then they could start with anything.

If the address starts 85.255 then you may have a problem. This is a block of addresses in the Ukraine which the attackers are using. Do this further check:

• Click Start (then Run in Windows XP), then type ncpa.cpl in the box.
• Under the LAN or High-Speed Internet section, right-click the Local Area Connection and select Properties.
• Highlight Internet Protocol Version 4 (for Vista) or Internet Protocol (for XP) and select Properties.
• Click Advanced…
• Click the DNS tab

If you saw 85.255 in nslookup but the DNS server addresses box is blank or has other numbers then the good news is that you are not infected (by this particular virus version). You did see 85.255 in nslookup though. This means that another computer on the same local network has passed on the wrong settings and websites you visit may not be what they appear. Shut down your computer and restart it later. Go back to the command prompt and type nslookup google.com - if the 85.255 address has gone you are now OK.

If you have any entries in the DNS server addresses box and they begin with 85.255 then unfortunately the DNSChanger virus is on your computer. Your computer is under remote control and you can't trust any websites you visit - definitely don't type in any credit card numbers as these will be monitored and stolen.

The only way to recover from this DNSChanger virus is to wipe and re-install your operating system from the original manufacturer's CDs. We've not found any antivirus tools that can clean the system once infected (some tools do claim to clean DNSChanger, but only work against older versions, not this one). First backup any documents and other important work you need to keep, then follow the manufacturer's instructions to wipe and reinstall. If you don't have the original CDs phone the manufacturer - they should send you copies for a small postage charge.

General advice for all ResNet users

Before you come back to Bristol next term, please make sure your anti-virus software and Windows Updates are up-to-date. Go to Control Panel, Security Centre, and make sure everything is marked green.

Find your manufacturers recovery CDs while you are home for Christmas and bring them back to Bristol, just in case you need them.

Generally be suspicious and careful when using the Internet - is this website, email or instant message what it appears to be? If in doubt please ask. You can contact the IT Help Desk 24 hours a day, even over the vacation, on 0117 928 7870.

Update by Mark 18/12/2008

FAQs

Q1)    I have MAC OSX, does this affect my computer?

A1)    In general, OSX is unlikely to be compromised by the DNSChanger as it's a Windows Virus but it's possible to be using the rogue DNS servers if they were assigned to you by a compromised computer on your local network.  On ResNet requests to external DNS servers are now blocked so you'll just have a computer that won't connect to any web sites, including this one!

It's a good idea to check your current DNS server settings though:

• In Finder, click Applications
• Under Utilities, click Terminal
• In the Terminal window, type one or both of the commands below until you get some information returned:

ipconfig getpacket en0
or
ipconfig getpacket en1

• Look for the domain_name_server ip address. Anything starting 85.255 is bad.

Microsoft yesterday released an extremely urgent update for Windows.

Normally the most reliable way to get updates from Microsoft is to use the Automatic Updates feature in Windows which will install updates for you. On this occasion however we strongly encourage everyone on ResNet to go to the Microsoft Update website or open Control Panel, Security Centre and check for updates. Install all critical or important updates. Do this now, rather than waiting for automatic updates.

This particular update is unusual: it is for a particularly nasty security problem. Any Windows system with File & Printer sharing switched on is vulnerable, and criminals are already using this problem to attack computers.

In order to help prevent a repeat of the ResNet disruption on 20th October, anyone connecting to ResNet with Windows Vista must now have Service Pack 1 (SP1) installed. If you have Windows Vista the online registration process and security checker now check for SP1 and won't proceed without it.

You need to go through the registration process when connecting for the first time, changing computer, changing room, or at periods during the year.

If when registering you get a message that the code entered is invalid, this is probably because you are using an old version of the security checker. Go through the registration process again and make sure you download and run a new copy of the security checker.

A good way to make sure you are getting the latest version of the checker and not one cached by your browser is:

1. click the right-hand mouse button on the security checker link,
2. choose Save Link As/Save Target As,
3. Type in a new name for the security checker file.
4. Download and run that new version from the desktop or other destination

We strongly encourage all ResNet users with Vista to install Service Pack 1, even if they aren't re-registering at this time. The easiest way to do this is to go to Control Panel, Security Centre, WindowsUpdate and install all important and critical updates.

Freshers.TV is a new TV channel just launched on ResNet, and running for the next two weeks. It is available

• on Freewire channel 106 (Windows clients only)
• on demand at http://www.freshers.tv
• or in VLC via udp://@233.3.18.74:5000

Programmes on Freshers.TV are produced by students at universities around the UK as part of the National Student Television Association (NaSTA).

There's a movement to launch a Bristol Student TV station too - so watch this space or get involved!

• Slow, unwell computer?
• Can’t connect to the Internet?
• Computer viruses or spyware?

What is the laptop clinic?
At the Student Laptop Clinic we’ll look at your laptop while you wait and help get it working better for you. The laptop clinic is a new service for students at Bristol. We are trialling it this year with generous funding from the Alumni Fund. The people working on the clinic are a combination of other Bristol students and IT support staff.

Where are the clinics?
The Hawthorns Student Refectory - entrance on Woodland Road

When?
Starts Tuesday 7th October 2008, then every weekday 2pm-5pm until further notice.

What should I bring?
Please bring your laptop and power supply. If any Windows or recovery CDs were supplied with your computer please bring them too.

How does the clinic work?
On a first come first served basis. You must stay at the clinic with your laptop.

Who can use the clinics?
All University of Bristol students.

What can you fix?
We’ll look at both Windows & Mac laptops. We can only help with software and configuration problems. We can’t solve every problem, but are happy to look and see what we can do. If we don’t fix it we can also provide advice on what to do next, information to help you fix the problem yourself or suggestions about who else you can contact.

What other help is available?

Don't forget that you can get help at other times by phoning the IT Help Desk (87870 internal, 0117 92 87870) or ResNet start of term hotline (89001 internal, 0117 92 89001) That's the first call for help, but for more detailed problems where we need to see the computer you might want to try the laptop clinic.

According to our monitoring system, the ResNet service to 23 rooms at Wills Hall Z Block hasn't been working since 4.20pm today (Monday).

When this happens it is normally due to a temporary power failure in the affected area - but it has been some time now and there still appears to be a problem, so it probably isn't just power. Sorry for the interruption to service. We'll investigate as soon as possible on Tuesday when staff are back in.

Updated 11.35pm Tuesday 7th Oct: ResNet in Wills Hall Z Block is now back up and running

Updated 6.15pm Friday 10th Oct: This failed again overnight on Thursday 9th Oct. The cause on both occasions this week is the power supply tripping out. This power supply is on a shared circuit with some of the rooms on the top floor of Z Block - students in these rooms lost power to their room too. ResNet access was restored when the power was restored.

The usual cause for a circuit to trip out is that it is overloaded, but we don't know precisely why it is happening in this case.