blog.does-not-exist.org
Nimda disassembly, and news.
For a good summary on nimda, see this page at incidents.org. Also, according to a message to the incidents and focus-virus mailing lists at SecurityFocus, a disassembly of the beast is under way.