• W32.Nimda.A aka Nimda: new mass-mailing worm that utilizes email to propagate itself. Arrives as 'readme.exe' in an email. In addition, the worm sends out probes to IIS servers attempting to spread by using the Unicode Web Traversal exploit similar to W32.BlueCode.Worm. Compromised servers may display a webpage prompting a visitor to download an Outlook file which contains the worm as an attachment.
  Check out the Latest Worms (MS) page.

F-Secure
McAfee
Sophos
Symantec

• W32/Magistr.B aka I.Worm.Magistr.B: obtains email addresses from *.WAB, *.DBX, and *.MBX files found in the infected system’s disk and then sends emails with its infected files as attachments. It may also include non-viral files such as .DOC, .GIF, and .TXT files as attachments to the emails it sends out. This destructive variant trashes this Hard Drive and deletes certain files.
  Check out the Latest Worms (MS) page.

F-Secure
McAfee
Sophos
Symantec
Trend Micro

• W32.Urgent.Worm aka A.Post.A: A VB Application that arrives as a readme.exe attachment to an e-mail. The e-mail asks you to to review the attachment, but once viewed the worm will activate hook your systems activation routines and then spread itself to all persons in your address book.
  Check out the Latest Worms (MS) page.

F-Secure
McAfee
Symantec
Trend Micro