W32.Nimda.B@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: October 9, 2001
Updated: February 13, 2007 11:55:59 AM
Also Known As: W32/Nimda.b@MM [McAfee], W32/Nimda-F [Sophos], I-Worm.Nimda.b [Kaspersky], PE_NIMDA.B [Trend], Win32.Nimda.B [Computer Associ
Type: Worm, Virus
Systems Affected: Microsoft IIS, Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References: CVE-2000-0884 CVE-2001-0154



W32.Nimda.B@mm is a variant of W32.Nimda.A@mm. This variant has the same functionality as the .A variant. However, it has been compressed with a run-time compressor.





For information on .enc detections, read the article, "What is an .enc detection?"

For additional information, read the Microsoft TechNet article, Information on the "Nimda" Worm.

Protection

  • Initial Rapid Release version October 10, 2001
  • Latest Rapid Release version October 10, 2001
  • Initial Daily Certified version October 10, 2001
  • Latest Daily Certified version October 10, 2001
  • Initial Weekly Certified release date October 10, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High

Writeup By: Neal Hindocha
Search by name
Example: W32.Beagle.AG@mm
Learn more about Zero-Day / Operation Aurora / Hydraq
Symantec DeepSight Screensaver