Aliases: Win32.Fisp.A@mm, W32/Fisp.worm, Troj/Spredtxt-A
Variants: N/A

Classification: Malware
Category: Computer Virus

Status: Inactive
Spreading: Slow
Geographical info: Some parts of Asia, Europe, North and South America, Africa and Australia
Removal: Easy
Platform: W32
Discovered: 16 Jan 2002
Damage: Low

Characteristics: Found on January 16, 2002, W32.Fisp was mistakenly known as a file infector. This virus is not a file infector since it copies itself to a particular folder where it resides with a random file name. It takes place two times per ten minutes.

More details about W32.Fisp

W32.Fisp is a self-replicating virus that creates the text file as \Windows\Spread_virus.txt which is a log file. It uses a log file to be able to write the date and time of the copied worm. For ten minutes, the virus sleeps. After which, the virus self-replicates two copies and places them in the current directory. Then, the virus executes after the creation of the two files. The created files will do the same – sleep for ten minutes and copies itself. It goes over as if a tree chart. This means that the virus is copying itself over and over every ten minutes until the computer system is crashed. At some point, the computer does malfunctioning.

The damage this virus gives is not harmful since it does not infect files. It can only create malfunction in the computer which disables the user to operate it. Nevertheless, its removal requires an effortless and simple manual deletion of the virus. Make sure that the virus definitions are updated and the System Restore is disabled. Before running a full system scan, restart the computer in a safe mode. All files that are detected as W32.Fisp must be deleted. Then, remove the \Windows\Spread_virus.txt file. In a normal mode, reboot the computer.