Nimda
≈ 3 min read
Names in other languages
- EnglishNimda
- FrançaisNimda
- MagyarNimda
- 日本語Nimda
- nbNimda
- SvenskaNimda
- ไทยนิมดา
- 한국어님다
Article bodies are English and are not machine-translated. A name in another language is not a translation of the article.
The Nimda virus is a malicious file-infecting computer worm. The first released advisory about this threat (worm) was released on September 18, 2001. Nimda affected both user workstations (clients) running Windows 95, 98, NT, 2000, or XP and servers running Windows NT and 2000. The worm's name comes from the reversed spelling of "admin". F-Secure found the text "Concept Virus(CV) V.5, Copyright(C)2001 R.P.China" in the Nimda code, suggesting its country of origin. However, they also noted that a computer in Canada was responsible for an October 11, 2001 release of infected emails alleging to be from Mikko Hyppönen and Data Fellows (F-Secure's previous name).
The Nimda virus is a malicious file-infecting computer worm. The first released advisory about this threat (worm) was released on September 18, 2001. Nimda affected both user workstations (clients) running Windows 95, 98, NT, 2000, or XP and servers running Windows NT and 2000. The worm's name comes from the reversed spelling of "admin". F-Secure found the text "Concept Virus(CV) V.5, Copyright(C)2001 R.P.China" in the Nimda code, suggesting its country of origin. However, they also noted that a computer in Canada was responsible for an October 11, 2001 release of infected emails alleging to be from Mikko Hyppönen and Data Fellows (F-Secure's previous name).
Methods of infection
Nimda proved effective partially because it—unlike other infamous malware like Code Red—uses five different infections vectors: Email Open network shares Browsing of compromised web sites Exploitation of various Internet Information Services (IIS) 4.0 / 5.0 directory traversal vulnerabilities. (Both Code Red and Nimda were hugely successful in exploiting well-known and long-solved vulnerabilities in the Microsoft IIS Server. ) Back doors left behind by the "Code Red II" and "sadmind/IIS" worms.
See also
Mixed threat attack Timeline of notable computer viruses and worms
References
External links
Cert advisory on Nimda Antivirus vendor F-Secure's info on Nimda
Text derived from https://en.wikipedia.org/w/index.php?oldid=1345627519 under CC BY-SA 4.0; modifications have been made.
References
1 claim could not be tied to a specific sentence and is listed in the table below instead.