Weaker Variant of Nimda on the Loose
Anti-virus experts say that PE_Nimda.E is unlikely to even approach the level of infection achieved by the original version of Nimda.A new variant of the Nimda worm is on the loose on the Internet, but anti-virus experts say that it is unlikely to even approach the level of infection achieved by the original version. Known as PE_Nimda.E, the new worm is quite similar to the one that wreaked havoc on Web servers and desktop PCs in September, but with a few key modifications. The code has apparently been recompiled by the author, and the name of the e-mail attachment containing the worm has been changed to Sample.exe, according to Roger Thompson, director of malicious code research at TruSecure Corp. in Herndon, Va.
The worm also tries to drop two .dllscool.dll and httpodbc.dllinstead of the one that the original Nimda virus installed.