Win32 virus

Classification

Category :

Malware

Type :

Virus

Aliases :

Win32.Jeefo, Win32.Virlock , Win32.Neshta , Win32.Floxif , Win32.Kashu , Win32.[family].[variant]

Summary

Detections that use the name format 'Win32.[family].[variant]' identify a virus that infects Windows executable (EXE) or DLL files.

Removal

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

Infecting files

A computer virus infects by inserting its viral code into the EXE or DLL file's own code. When the infected EXE or DLL file (also known as the host file) is next run, the injected viral code in it will replicate itself; the duplicated code is then inserted either into the same file again, or into another file on the same computer. The cycle then begins again.

Impact

As the replication process repeats, the increasing additions of unwanted code can disrupt the host file's normal operations. If it happens often enough, the virus code can completely corrupt the host file. If enough files are infected, the entire computer may be completely disrupted.

In addition to infecting files, a virus can often perform other harmful actions. These actions can range from simple nuisances to severely harmful:

  • Changing the desktop background
  • Playing sounds or displaying images
  • Deleting files and programs
  • Modifying or stealing sensitive data files

Depending on what other actions the virus performs, the impact of an infection can range from annoying to devastating.