Worm.Win32.Nople, simply known as Nople, is a Microsoft Windows worm that spreads via LAN.


Nople is a Windows PE executable file about 51Kb of length, written in Microsoft Visual C. The worm copies itself to hardcoded C:\WinNT directory with the "noplease_flash_movie.exe" name, then spreads with the same name over local network and copies itself to shared network drives. The worm is able to spread over WinNT machines only. It also starts its copies on remote machines as services, in case there is permission for that, as a spreading routine.

The worm manifests itself with a messy and colorful video effect and displays the text in Spanish, after some random minutes and seconds:

Es hora de formatear tu disco

Which translates to:

It's time to format your disk


Community content is available under CC-BY-SA unless otherwise noted.