TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
PE_VIRUT.H
Overview

Malware type: File infector

Aliases: Virus.Win32.Virut.n (Kaspersky), W32/Virut.gen (McAfee), W32.Virut.B (Symantec), W32/Virut.Gen (Avira), Infection: W32/Splendor.9152 (F-Prot), W32/Vetor-C (Sophos), Virus:Win32/Virut.C (Microsoft)

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Low

Infection Channel 1 : Infects files


Description: 

This file infector may be downloaded unknowingly by a user when visiting malicious Web sites. It may be dropped by other malware.

It infects files of certain types.

It infects files using any of the following techniques:

  • Appending
  • Cavity
  • Entry Point Obscuring

It does not infect files that contain certain strings in their file names.

It creates mutex(es) to ensure that only one instance of itself is running in memory.

For additional information about this threat, see:
Solution
Technical Details

Description created: Apr. 10, 2007 1:16:19 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.