The actual lifecycle of Nimda can be split to four parts:
1) Infecting files, 2) Mass mailing, 3) Web worm and 4) LAN propagation.
F-Secure Anti-Virus detects this variant with updates released on October 29, 2001 / 18:32:39 (GMT+2).
A tool to disinfect all Nimda variants including Nimda.E is available here:
On October 30th, F-Secure received reports of live infections in Germany and Sweden. On October 31st, we received further reports from USA, China, France, Norway, Finland and Spain.
For more information on Nimda.A please read the description:
[F-Secure Corp.; October 30th, 2001]