x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Nedal

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Nedal
Technical name:VBS/Nedal
Threat level:Low
Alias:,
Type:Worm
Effects:  It overwrites files with certain extensions, deletes the contents of the Windows system directory, drops other viruses to the system and damages files with an EXE extension.

Affected platforms:

Windows XP/2000/NT/ME/98/95

First detected on:Sept. 10, 2002
Detection updated on:Sept. 10, 2002
StatisticsNo

Brief Description 

    

Nedal is a worm that makes reference to Osama Bin Laden and the tragic events that took place in New York in September 11, 2001. In fact, the message that it uses to spread has the subject Osama Bin Laden Comes Back!.

Nedal spreads massively and quickly as, besides e-mail, it uses IRC chat as a means of transmission.

When the worm activates it is very easy to know it is present on the system as it displays several messages that refer to the Al Qaeda terrorist organization. 

Once the attached file is run, Nedal carries out really destructive actions, including overwriting files with the following extensions: VBSVBEGIFJPGBMPAVIMP3MPGZIPCABMDBXLSLNKDOCTXT   and RTF. Moreover, the worm is programmed to delete the contents of the Windows system directory. 

Nedal also creates three files in the affected computer, one of which can damage files with an EXE extension.   

Finally, programming bugs in the worm's code might prevent it from working properly in the infected computer.

Visible Symptoms 

    

Once the file in the message that carries Nedal is run, the following screen is displayed:

The worm then displays the following message:

Finally, on September 11 Nedal displays the following message: