 Zu Avira Answers Alias: W32/Nimda.gen@MM Size:57,344 bytes  VDF
Version:    Technical DetailsW32/Nimda is an Internet virus that
can send itself by email, as a mass mailer. It can be activated
on all Microsoft Windows 9x/Me and NT/2000 Platforms. Nimda
sends itself as email attachment. These attachments are named
README.EXE, the extension being usually unlisted.  The email
looks differently: the subject is a random text and the body is
usually empty. In Outlook or Outlook Express, the attachment is
not in preview mode.In some cases the attachment can have the
extension .COM or .WAV.  If the file README.EXE is opened
automatically or by double-click, the worm copies itself in
Windows Temp folder. It creates a file with the name
FormMExxxx.TMP.EXE, where xxxx are random characters. This file
is run and then deleted by the next system start in Windows
9x/Me. Then the worm copies itself in Windows system as:   The
files with the same name will be overwritten. The file LOAD.EXE
will be inserted in SISTEM.INI. Thu