1. /
  2. Security Response/
  3. Civil_Defence.6672

Civil_Defence.6672

Risk Level 1: Very Low

Updated:
February 13, 2007 12:55:55 PM
Also Known As:
Civil.mp.6672.a, Cvil_Defense, Shifter, Datos, PL
Type:
Virus

Upon execution of an infected file, the Civil_Defence.6672 virus will first infect the master boot record (writing it’s code from physical position cylinder 0 side 0 sector 2 to physical position cylinder 0 side 0 sector 15) and then remove itself from the infected file that is being run. Once this is done, the virus waits for the next system reset before becoming active in memory.

Antivirus Protection Dates

  • Initial Rapid Release version December 20, 2000
  • Latest Rapid Release version December 20, 2000
  • Initial Daily Certified version December 20, 2000
  • Latest Daily Certified version December 20, 2000
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver