StorageTek Employee are urged to protect their PC by downloading and run the following:
NimdaVirusProtection.zip

This program performs the following tasks:

• Enables McAfee to scan 4 character extensions (example: HTML)
  
• Enables scanning of the following file types: EML LNK PIF NWS
  
• Patch IE with one of two Microsoft patches.
  
• If you have IE version 5.5 or greater the job will run Q299618 referenced in
  Microsoft Security Bulletin MS01-27.
  
• If you have a version less than IE5.5 the job will run Q290108 referenced in Microsoft Security Bulletin MS01-20.
  

Overview

The CERT/CC has received reports of new malicious code known as the "W32/Nimda worm" or the "Concept Virus (CV) v.5." This new worm appears to spread by multiple mechanisms:

• From client to client via email
• From client to client via open network shares
• From web server to client via browsing of compromised web sites
• From client to web server via active scanning for and exploitation of the "Microsoft IIS 4.0 / 5.0 directory traversal" vulnerability (VU #111677)
• From client to web server via scanning for the back doors left behind by the "Code Red II" (IN-2001-09), and "sadmind/IIS" (CA-2001-11) worms.

Initial analysis indicates that the worm contains no destructive payload beyond modification of web content to facilitate its own propagation.

The Information Security team is dedicated to bringing together the knowledge and experience of the security professionals at the world's leading storage solutions provider, meeting the ever-increasing demand for business-based solutions to information security problems, and to using its influence to further developments and put principles into practice.

For information on StorageTek's Information Security policies see CP 4-1-1 . 

If you have an urgent information security problem please contact the Security Hotline.  If you have an issue you feel needs to be addressed by the Information Security team please email the Information Security Working Group.   Both contacts will respond as soon as practically possible.