A New "Virus" W32.Nimda.A.@mm is Circulating

According to Symantec's AVCenter blurb on the NIMDA.A worm, "W32.Nimda.A@mm is a new mass-mailing worm that utilizes multiple methods to spread itself. The worm sends itself out by email, searches for open network shares, and attempts to copy itself to unpatched Microsoft IIS web servers. The worm does this using the Unicode Web Traversal exploit. A patch and information regarding this exploit can be found at [this web page]. Users visiting compromised Web servers will be prompted to download an .eml (Outlook Express) email file, which contains the worm as an attachment. Also, the worm will create an open network share on the infected computer, allowing access to the system." The worm is slowing down the internet even if it doesn't directly affect Macs. [Bob Unger]

Saw something? Send a tip

The archive ran on reader tips. What did you see, where, and do you want the credit?

Read by the editor. Never published without your say.

More in Security · This month in the archive