W32.Dengue

W32.Dengue is a complex, slow-infecting, polymorphic Win32 virus that uses Explorer.exe as its main host. Its uses in-memory infection of Explorer.exe, which is always running in Windows NT/2000 and Windows 9x. W32.Dengue is encrypted with more than one polymorphic layer. The size of the W32.Dengue-infected files is always divisible by 101. W32.Dengue also deletes the checksum files of several antivirus programs.

Protection

• Initial Rapid Release version April 24, 2000
• Latest Rapid Release version April 24, 2000
• Initial Daily Certified version April 24, 2000
• Latest Daily Certified version April 24, 2000
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Moderate
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low