Date:         Wed, 19 Sep 2001 12:57:03 -0400
Reply-To:     "Michael S. Zdeb" <msz03@HEALTH.STATE.NY.US>
Sender:       "SAS(r) Discussion" <SAS-L@LISTSERV.UGA.EDU>
From:         "Michael S. Zdeb" <msz03@HEALTH.STATE.NY.US>
Subject:      re NIMDA Virus
Content-Type: text/plain; charset=us-ascii

In addition to opening attachments, one should also be aware of the
following with the NIMDA virus (from state network security folk here in
NYS)...

...Anyone browsing the Internet using unpatched versions of Microsoft
Internet Explorer 5.01 and 5.5 who visits and infected web site will
become a vector for spreading this worm.  It's this aspect of the worm
that has the potential to create a denial of service attack and
adversely effect the performance of your internal network.  To prevent
the spread of this worm, all affected browsers must be patched....

and...

...Most e-mails containing the W32/Nimda.A-mm worm do not have a visible
attachment.  The worm immediately activates and attempts to run a
programming script as soon as the user clicks and opens the e-mail.  It
then e-mails copies of itself to selected addresses in the infected
computer's Outlook e-mail address book and Web cache folders, and begins
scanning the Internet for Web servers to infect....


Mike Zdeb
New York State Department of Health
ESP Tower - Room 1811
Albany, NY   12237
P/518-473-2855  F/630-604-1475