Nimda virus
VIRUS INFORMATION
09/18/2001 - Nimda, which is admin spelt backwards is a computer virus infects Microsoft Windows 95, 98, NT and 2000 computers running Microsoft Outlook. The virus is spread through e-mail and uses the content-type audio/x-wav so it can be ran automatically without the infected e-mail being open. Once a computer is infected the virus attempts to share the C: drive and checks for the Code Red Virus. Next, the virus adds JavaScript code to HTML documents that opens the file readme.EML. The virus is then capable of spreading when this HTML document is open on other computers.
SYMPTOMS
The system.ini file located in the Windows directory will have the following line:
Shell=explorer.exe load.exe -dontrunold
When selecting or opening an e-mail the Microsoft Windows Media Player may open automatically but give an error. This likely indicates that the virus is attempting or has infected your computer.
HOW TO CLEAN VIRUS OR PREVENT IT
Ensure that you have the latest update for your virus protection program.
If you are using Microsoft Internet Explorer 5.01 or greater ensure that you have the Incorrect MIME header patch installed on your computer. This patch can be found by clicking here.
