- Discovered:
- August 25, 1999
- Updated:
- February 13, 2007 11:36:09 AM
- Type:
- Virus
W95.Evyl is a Windows virus written in assembly language. The virus is a "fast infector", and does not go memory resident when executed. The virus only infects Portable Executable (PE) files. However, due to bugs in the viral code, W95.Evyl only replicates under certain conditions.
What are Portable Executable (PE) files?
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE format executable can be executed on any version of Windows 95, 98, Me, NT, and 2000. Therefore, all PE files are executable, but not all executable files are portable.
A good example of a Portable Executable is a screen saver (.scr) file.
Antivirus Protection Dates
- Initial Rapid Release version August 25, 1999
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version August 25, 1999
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Neal Hindocha



