-
Discovered:
- July 9, 2012
-
Updated:
- September 21, 2012 10:05:30 AM
-
Also Known As:
- Worm.Win32.Fipp.a [Kaspersky], PE_MUSTAN.A [Trend]
-
Type:
- Worm
-
Infection Length:
- Varies
-
Systems Affected:
- Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
W32.Morto.B is a worm that spreads through removable drives and by using Remote Desktop Protocol (RDP) connections. It also infects executable files found on the compromised computer.
Antivirus Protection Dates
-
Initial Rapid Release version July 9, 2012 revision 049
-
Latest Rapid Release version July 9, 2012 revision 049
-
Initial Daily Certified version July 10, 2012 revision 003
-
Latest Daily Certified version July 10, 2012 revision 003
-
Initial Weekly Certified release date July 11, 2012
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 50 - 999
-
Number of Sites: 3 - 9
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Moderate
Damage
-
Damage Level: Medium
-
Payload: Infects executable files.
-
Modifies Files: Injects a copy of itself into a system file.
-
Compromises Security Settings: Disables services and deletes applications related to security products.
Distribution
-
Distribution Level: Medium
-
Target of Infection: Spreads through removable drives and by using Remote Desktop Protocol.
Writeup By: Alan Neville
