Facebook
Digg
Reddit
Technorati
Slashdot
Twitter
Google
Yahoo Buzz
Delicious
StumbleUpon
- Discovered:
- July 9, 2012
- Updated:
- September 21, 2012 10:05:30 AM
- Also Known As:
- Worm.Win32.Fipp.a [Kaspersky], PE_MUSTAN.A [Trend]
- Type:
- Worm
- Infection Length:
- Varies
- Systems Affected:
- Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
W32.Morto.B is a worm that spreads through removable drives and by using Remote Desktop Protocol (RDP) connections. It also infects executable files found on the compromised computer.
Antivirus Protection Dates
- Initial Rapid Release version July 9, 2012 revision 049
- Latest Rapid Release version July 9, 2012 revision 049
- Initial Daily Certified version July 10, 2012 revision 003
- Latest Daily Certified version July 10, 2012 revision 003
- Initial Weekly Certified release date July 11, 2012
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 50 - 999
- Number of Sites: 3 - 9
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Medium
- Payload: Infects executable files.
- Modifies Files: Injects a copy of itself into a system file.
- Compromises Security Settings: Disables services and deletes applications related to security products.
Distribution
- Distribution Level: Medium
- Target of Infection: Spreads through removable drives and by using Remote Desktop Protocol.
Writeup By: Alan Neville