Nimda Worm

[2ffat]

A new worm that exploits the same IIS vulnerbility as Blue Code has hit the net. This one, however can also infect Outlook users, too. The worm arrives in an attachment that is titled "Readme.EXE." Outlook users only need to preview the e-mail to be infected. See

http://www.securityfocus.com/news/253

for more information. Several antivirus vendors have identities available for this worm in addition to Microsoft patch.

See also:

[URL unfurl="true"]www.symantec.com/avcenter/venc/data/w32.nimda.a@mm.html[/URL]

and

http://www.sophos.com/virusinfo/analyses/w32nimdaa.html

James P. Cottingham

I am the Unknown lead by the Unknowing.
I have done so much with so little
for so long that I am now qualified
to do anything with nothing.

 

[hnd]

For this worm there is a Virus Definition Update available on the Websites from Symantec and MacAffee.

hnd
hasso55@yahoo.com

 

[fgrasso]

The Mcafee dat 4160 ( with engine 4.1.40) hang the scan-on-demand on netshield on nt4srv.

Someone has problems?

thanks
Fabio Grasso