Threat Encyclopedia

Subtitle

Virus, spyware, worms and other threat descriptions

Selected viruses, spyware, and other threats: sorted alphabetically

0-9
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
 

Win32/Nimda.E

Win32/Nimda.E is unlike the previous variants (Nimda B, C, D) which were different from each other only by various compression methods used, this variant is not compressed and the worm code is slightly altered.  In its body is the following text:

Concept Virus(CV) V.6, Copyright(C)2001, (This's CV, No Nimda.)

The name of the attachment is sample.exe.  When compared to the old version the worm also has some names of the created files altered (e.g. httpodbc.dll instead of admin.dll).   NOD32 is able to clean this variant starting with version 1.121.
The patch fixing the vulnerability of Internet Explorer which is exploited by this worm is available on: www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.