[ALBSA-Info] [lev-open] Security Response to "Nimba" Worm (09/18/01) (fwd)

[eriola]

I got this from my school. Thought it might help some of you.
eriola.

---------- Forwarded message ----------
>From FAS Network Security Adivisors

	Users  should  be aware  that  another  worm,  which is  being
        referred  to  as  "Nimba",  began making  rounds  through  the
        Internet   earlier   today.    This  particular   exploit   is
        particularly nasty in that it  utilizes a number of methods to
        attempt to propagate, including  email, web, and file sharing.
        The Internet  community has  noted the unprecedented  speed in
        which  this   worm  has   spread,  and  the   ensuing  network
        loads which have resulted.

        We are sending out this  advisory to make individuals aware of
        the  situation and  to encourage  all users  to update  to the
        latest antivirus software which  detects and removes this worm
        from infected systems.  We are in the process of attempting to
        identify and  contact as many local systems  as possible which
        may have been infected.  Due  to the rapid spread of this worm
        and the  resulting impact on  network resources, we  are faced
        with  having to  disable connectivity  to the  most  active of
        these systems until the problem can be addressed.

        FAS Computer  Services supports the  McAfee VirusScan product,
        and this  software is  available at the  Help Desk  in Science
        Center B-13 or via download at:

                http://www.fas.harvard.edu/computing/antivirus

        Users already  using the McAfee VirusScan  product should note
        that they  may need to  update to the latest  virus definition
        software (4159)  in order to  detect Nimba.  This file  can be
        obtained via the web at:

                http://download.mcafee.com/updates/4xa.asp

        More information about Nimba can also be found at:

     http://www.mcafee.com/anti-virus/viruses/nimba/default.asp?cid=2444

        For assistance,  students may  schedule an appointment  with a
        Residential User Assistant by calling 495-9000 or visiting the
        Help Desk in the basement  of the Science Center.  Faculty and
        Staff should call 496-2727.

                                                FAS Network Operations