W32.Simile

W32.Simile is a very complex virus that uses entry-point obscuring, metamorphism, and polymorphic decryption. It infects files in folders on all fixed and remote drives that are mapped at the time that the virus is executed. The virus contains no destructive payload, but infected files may display messages on certain dates.

Protection

• Initial Rapid Release version March 6, 2002
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version March 6, 2002
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date March 6, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low