Just when I got the Sircam32W Worm cleaned out of my computer system, I got hit with the malicious mass-mailing Nimda Worm. Since I was dialing into the Internet through an ISP, I was annoyed that the worm had managed to get through the ISP's security.
However, a thorough investigation proved to me that this is one nasty problem that is difficult to get rid of. Nimda is admin, the abbreviation for network administrator, spelled backwards. While we don't know where this worm originated or who created it, the worm has several methods of attack and once you think you've eliminated it from your network, it can be coming back and re-infecting the system someplace behind you.
The W32.Nimda.worm showed up on Tuesday, September 18, 2001. Capable of attacking both PCs and servers running Microsoft's Windows 95, 98, Me, and 2000 operating systems, the fast-spreading worm is a combination of Code Red and APost.
Nimda uses a multi-pronged method and can attack Microsoft IIS servers via at least 12 known vulnerabilities and can spread to other connected machines on a network via open shares.
