Microsoft has labeled it the 'most destructive virus' ever. And the FBI's National Infrastructure Protection Center is up to its ears investigating this computer worm, called Nimda (a.k.a. W32.NIMDA.A@mm or TROJ_NIMDA.A). Computer users have been warned against using the Net as even browsing through an infected webpage can have a catastrophic effect of computers.
Discovered first by McAfee, Nimda is similar to Code Red, but is a lot more lethal thanks to its many masquerades -- it spreads through email, network-shared drives and through servers with IIS installed. Nimda is a network-aware, mass-mailing worm that infects PC Windows users and IIS web servers. Cnet.com calls it a lethal combination of Code Red and APost.
Nimda transmits via Internet Scans and email and can be detected as an email with a readme.exe attachment. This virus simply destroys Sector Zero from the hard disk, where vital information for its functioning is stored.
This is how the virus goes about on its destruction trail:
-
The virus sends itself automatically to all contacts on your list with the title "A Virtual Card for You."
-
As soon as the supposed virtual card is opened, the computer freezes so that the user has to reboot.
-
When the ctrl+alt+del keys or the reset button are pressed, the
virus destroys Sector Zero, thus permanently destroying the hard disk.
So, beware of email with dubious subjects like "A Virtual card for You." As soon as you get the mail, delete it.
Chennai-based K7 Computing Pvt Ltd has announced that the solution for the Nimda worm is available in its product Vx2000Plus which can be downloaded from the company's website www.k7computing.com. K7 Computing also said that it offers customized solutions to corporates to eradicate the worm from mass networks.
Trend Micro has created an updated virus pattern file No. 941 to detect and remove this worm, TROJ_NIMDA.A. This pattern file is available for download from Trend Micro's Web site at
www.antivirus.com. Desktop users can also take advantage Trend Micro's free online virus scanner, Housecall, to scan their system for this virus.
Intel has also announced that a new and very destructive virus was discovered recently. If you receive an email called "An Internet Flower For You," do not open it. Delete it right away! This virus removes all dynamic link libraries (.dll files) from
your computer.
Your computer will not be able to boot up!!