Rail Traffic Slowed As Computer Virus Strikes CSX

Rail traffic throughout the Southeast was slowly returning to normal Wednesday afternoon after a computer virus disrupted CSX's telecommunications network which some systems use to control signaling, dispatching and other systems.

As a result, passenger and freight train traffic was halted immediately, including the morning commuter train service in metropolitan Washington, D.C.

The Jacksonville-based rail line said the cause was believed to be a worm virus similar to those that have infected the systems of other major companies and agencies in recent days.

The signaling system went down about 1:15 a.m. and briefly affected the entire CSX system, which covers 23 states east of the Mississippi River.

Although the problem was largely corrected by midday, there were some residual problems that caused delays of up to six hours to Amtrak service in the mid-Atlantic region, Amtrak spokesman Dan Stessel said.

"Most of the delays are in the 15- to 30-minute range on trains that travel through CSX territory," Stessel said.

Ten Amtrak trains were affected, Stessel said. Trains between Pittsburgh and Florence, S.C. were halted because of dark signals and one regional Amtrak train from Richmond, Va., to Washington and New York was delayed for more than two hours.

"When CSX bought out all those other railroads, they put the signaling all together down in Jacksonville, Florida," one D.C. area passenger said. "It simply doesn't work."

Several local commuter rail lines in Maryland, West Virginia and suburban Washington D.C. were affected, making the morning commute difficult.

CSX told Channel 4's Adam Landau that its computers were mostly repaired by 7:30 a.m., but it could take 24 hours for the rail system to completely recover.

Passengers with questions about service and schedules and delays should contact Amtrak directly.

It was unclear if this was the same virus that flooded computer networks and inboxes Tuesday and Wednesday.

Computer security experts warned Wednesday that the SoBig.F virus that started replicating itself will get worse before it gets better.

"We have not seen the peak as of yet," said Scott Chasin, chief technology officer of MX Logic, a company that sells e-mail defenses. News4Jax.com is a client of MX Logic.

Chasin said 30 percent of the company's clients have been attacked, but the number of victims is growing. As of noon, Central time, Wednesday, MX Logic had blocked 4 million attacks, and that number is "growing by the minute."

Previous versions of the virus, as well as others such as the Klez virus, sent messages one at a time from a single, faked e-mail address. The new type take an address from the infected computer's address book, and use that as the "from" line, making it appear more like legitimate mail. It can also send to hundreds of addresses at once.

This can result in returned-mail messages for users who don't have the virus. If someone you know gets infected, his or her computer could "spoof" your name onto the copies of the virus that are sent out. If they reach invalid addresses, or are blocked by a virus detector that sends a warning to the supposed sender, the notification would return to your inbox.

Subject lines associated with the new SoBig.F virus include "Thank You!" "Your details," "Details," "Wicked screensaver," "Resume," "Approved," and "That movie." If your e-mail program allows you to set rules or filters for your inbox, funneling messages with those subject lines to your deleted items could save you some time.

In popular e-mail clients such as Microsoft Outlook and Outlook Express, go to the Tools menu to set up the rules. In Outlook, look for the "Rules Wizard. In Express, look for "Message rules." You can elect to have messages with the above subject lines automatically deleted, or you can create a special folder the program diverts the mail to. That way, you can review the messages to make sure nothing legitimate is deleted.

People whose addresses are available on the World Wide Web, or those who are on distribution lists that are available, can see high volumes of returned mail. Those addresses are often used because they are in many contact lists, since popular programs like Outlook Express automatically save e-mail addresses.

Editors for Internet Broadcasting Systems, which hosts News4Jax.com, found that instead of the usual hundreds of e-mails arriving in their boxes, they were receiving thousands. One said that he received an average of almost 1.5 e-mails every minute during the overnight hours Tuesday.

The company itself, though it did not appear to have any infected computers, received five times the normal amount of e-mail over a 24-hour period Tuesday and Wednesday, and network administrators said they could not guess when the flow might slow.

December 06, 2002
# 2002-26
The Carlyle Group Acquires Majority Stake in CSX Lines for $300 Million

Washington, DC - Global private equity firm The Carlyle Group today announced that it has agreed to acquire a majority stake in CSX Lines, LLC from the CSX Corp. (NYSE: CSX) in a transaction valued at $300 million. Current CSX Lines President and CEO Charles G. (Chuck) Raymond and his management team will remain in place and the new entity will be called Horizon Lines, LLC. Mr. Raymond will also serve as Chairman of the company's board.

CSX Lines, with 17 U.S. flag vessels and 22,000 containers, is the nation's largest ocean transport company, providing ocean transportation and logistics services to and from the continental United States, Alaska, Hawaii, Guam, and Puerto Rico.

Carlyle Managing Director Greg Ledford said, “CSX Lines is a well-managed company that has a bright future. We look forward to working with Chuck Raymond and his seasoned team in the coming years to further unlock CSX Lines' great potential. CSX Lines complements Carlyle's growing transportation portfolio.”

CSX Corp. President Michael J. Ward, said, “This is a terrific transaction for all parties. Completion of this transaction is consistent with our oft and long-stated strategy of becoming a more rail-based organization.”

Charles G. Raymond said, “We are excited about working with The Carlyle Group and benefiting from its transportation experience and financial expertise and support. We expect to grow profitably and maintain our position as the nation's largest and most successful ocean shipping company.”

The equity for this transaction will come from Carlyle Partners III, L.P., Carlyle's flagship U.S. Buyout Fund. Financing for the transaction has been provided by ABN AMRO Bank. The transaction is subject to customary conditions and regulatory approval and is expected to close in the first quarter of 2003.

You can elect to have messages with the above subject lines automatically deleted,

If these virus writers got smart they would make up random subject lines so that simple filters like this wouldn't work.

Course in this case a simple block of all *.pif file attachments would of done it. Unless you're getting the freakin bounces of these sent to your faked return address that do not have the file attachment. I received a couple hundred an hour (webmaster account) till I started filtering on subject line too.

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.