W95.Dupator.1503

W95.Dupator.1503 is a virus that appends itself to Windows PE files. It also creates an infected copy of Kernel32.dll in the Windows folder.



NOTE: W95.Dupator.1503 has been known to infect variants of W32.Opaserv.Worm. In files where W95.Dupator.1503 cannot be repaired, the files should be deleted.

What are Portable Executable (PE) files?
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE-format executable can be executed on any version of Windows 95, 98, Me, NT, 2000, and XP. All PE files are executable, but not all executable files are portable.

A common example of a PE file is a screen saver (.scr) file.

Protection

• Initial Rapid Release version November 3, 1999
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version November 3, 1999
• Latest Daily Certified version July 19, 2008 revision 018
• Initial Weekly Certified release date November 3, 1999

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low