Latest Virus 22, April 2009

Updated: April 22, 2009 10:13:18 AM

Type: Potentially Unwanted App

Name: wfpdisable

Risk Impact: Medium

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP

This potentially unwanted application may be downloaded and executed manually. It may arrive as a file with the following name:
WFPDISABLE.EXE

When executed in a command prompt the file displays the following message:
wfpdisable - Disables Windows File Protection
until next reboot
(C) 2003 [REMOVED]@[REMOVED].com
-------------------------------------------------
WFP disabled.
Reboot machine to re-enable it.

The risk then disables Windows File Protection.

Note: If the computer is restarted, Windows File Protection will be reenabled