W32.Finaldo.B@mm

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: November 6, 2001
Updated:: February 13, 2007 11:46:37 AM
Type:: Worm, Virus

W32.Finaldo.B@mm is a simple Win32 polymorphic virus that infects Portable Executable (PE) files. It searches for files that have the extensions .scr, .ocx, or .exe, and it inserts itself at the end of the file.

What are Portable Executable (PE) files?
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE-format executable can be executed on any version of Windows 95, 98, Me, NT, and 2000. Therefore, all PE files are executable, but not all executable files are portable.

A good example of a Portable Executable is a screen saver (.scr) file.

Antivirus Protection Dates

Initial Rapid Release version November 7, 2001
Latest Rapid Release version March 11, 2011 revision 005
Initial Daily Certified version November 7, 2001
Latest Daily Certified version March 11, 2011 revision 025
Initial Weekly Certified release date pending

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Moderate
Removal: Moderate

Damage

Damage Level: Medium

Distribution

Distribution Level: High

Writeup By: Douglas Knowles

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16