W95.Bistro

W95.Bistro is a virus that infects files under Windows 9x. It is currently one of the most complex and difficult to detect 32-bit metamorphic viruses. The virus infects Portable Executable (PE) files, and adds an infected executable into .zip or .rar archive files. Norton AntiVirus, with the latest virus definitions file, detects all known dropper files from the virus as well as other infected files by using the Symantec Striker32 scanning engine.

Protection

• Initial Rapid Release version October 25, 2000
• Latest Rapid Release version October 25, 2000
• Initial Daily Certified version October 25, 2000
• Latest Daily Certified version October 25, 2000
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: High

Distribution

• Distribution Level: Low