Win32.Worm.Nimda.O malicious file

The Win32.Worm.Nimda.O is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32.Worm.Nimda.O virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32.Worm.Nimda.O?


File Info:
crc32: 79146CE3
md5: be72ecb2b0da39882f8af95aff5386f8
name: BE72ECB2B0DA39882F8AF95AFF5386F8.mlw
sha1: 2c45066a93dab2e10c393d63d3690c0ca13c8fe8
sha256: 73a92617813a05597bba81169dba81eda0a84352825dec24dd311680053dcdbd
sha512: afc1e2ba0ec2fd28332f70421e1e6548f3ba35366909593814889b7e71ce6234f0bc4018b648958b67184d627db8f2361596bcb97ebdf51a8002ca0a42d52bfb
ssdeep: 1536:5RQvLjWiALqLkHbp7m8GYT3WXs39i4zvKisKldR:5Vz2Lk71m8Ge3WXs1bV
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright (C) Microsoft Corp. 1981-1998
InternalName: CERTMGR.EXE
FileVersion: 5.131.1863.1
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows NT(R) Operating System
ProductVersion: 5.131.1863.1
FileDescription: ECM Certificate Manager
OriginalFilename: CERTMGR.EXE
Translation: 0x0409 0x04b0

Win32.Worm.Nimda.O also known as:

K7AntiVirus	Trojan ( 0008d46e1 )
DrWeb	JS.Nimda
CAT-QuickHeal	W32.Runouce.B
ALYac	Win32.Worm.Nimda.O
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Worm:Win32/Runouce.041e00fc
K7GW	Trojan ( 0008d46e1 )
Cybereason	malicious.2b0da3
Baidu	Win32.Trojan.Agent.bf
Symantec	W32.Chir.B@mm
ESET-NOD32	a variant of Win32/Chir.C
Avast	Win32:Agent-BARL [Trj]
ClamAV	Win.Worm.Brontok-88
Kaspersky	HEUR:Virus.Win32.Chir.gen
BitDefender	Win32.Worm.Nimda.O
MicroWorld-eScan	Win32.Worm.Nimda.O
Tencent	Virus.Win32.ChineseHackerRes.a
Ad-Aware	Win32.Worm.Nimda.O
Sophos	Mal/Generic-S
Comodo	EmailWorm.Win32.Brontok.es0@1cjjak
VIPRE	Trojan.Win32.Malware (fs)
TrendMicro	WORM_CHIR.DI
McAfee-GW-Edition	W32/Chir.gen@MM!remanants
FireEye	Generic.mg.be72ecb2b0da3988
Emsisoft	Win32.Worm.Nimda.O (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Heur:Trojan/VB
Avira	W32/Chir.B
Antiy-AVL	Trojan/Generic.ASCommon.11
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Worm.Nimda.O
McAfee	W32/Chir.gen@MM!remanants
MAX	malware (ai score=82)
Malwarebytes	Chir.Virus.FileInfector.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	WORM_CHIR.DI
Yandex	I-Worm.Chir.B
Ikarus	Email-Worm.Win32.Runouce.B
MaxSecure	Virus.W32.Runouce.B
Fortinet	W32/Chir.C!tr
AVG	Win32:Agent-BARL [Trj]

How to remove Win32.Worm.Nimda.O?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32.Worm.Nimda.O malicious file