Virus Database

TrojanDropper.Win32.ExeStealth.20

Description TrojanDropper.Win32.ExeStealth.20

This program is not "trojan programs" itself, but it is designed:
to hide other EXE files inside itself
to install these EXE files to other machines in silent mode
I.e. this program was designed to hide, deploy and install not asked EXE files to victim machines. So, it is a usual "TrojanDropper".
Others
It can handle (deploy and drop) just one EXE file.
It does not install files in case "SoftIce" debugger is installed.
The EXE file in the "dropper" can be encrypted.
When run it sets the "666" (29Ah) value to a internal variable, but does no use it. That is an indirect proof that "ExeStealth" authors are related to "29A" virus writing underground group.
The "ExeStealth" original package has several files included:
the trojan dropping file (stub) itself
an configuration utility to write necessary data to "dropper"
"readme.txt" with copyright information in it:
EXE Stealth V2.3 Shareware by WebtoolMaster Date: 23.08.2002
http://www.webtoolmaster.com Mail: support@webtoolmaster.com

Despite the copyright information the "ExeStealth" is classified as "TrojanDropper" and we recommend to use other (legitimate) EXE files installation utilities.

Check other viruses! Be aware! Use Antiviral Software

Slovakia.1629

Description Slovakia.1629

This a harmless non memory-resident encrypted parasitic virus. It searches for EXE files, then writes itself to the end of the file. After infection it may display the messages:
Greeting from Bratislava, SLOVAKIA.
Type the word SLOVAKIA :
SLOVAKIA virus version 2.00 (c) 1991 by ??. All Rights Reserved.
Then they wait for 'SLOVAKIA' input. On input error they display:
Type word SLOVAKIA, not CZECH, YUGOSLAVIA or SLOVENIA !! Press Esc.

Slovakia.2387

Description Slovakia.2387

This a harmless non memory-resident encrypted parasitic virus. It searches for EXE files, then writes itself to the end of the file. After infection it may display the messages:
Greeting from Bratislava, SLOVAKIA.
Type the word SLOVAKIA :
SLOVAKIA virus version 2.00 (c) 1991 by ??. All Rights Reserved.
Then they wait for 'SLOVAKIA' input. On input error they display:
Type word SLOVAKIA, not CZECH, YUGOSLAVIA or SLOVENIA !! Press Esc.
It also contains the text string:
Msg #0 to Slon! & Kuko. Hi _, pleased to meet your program. Enjoy new
version of S. :-) Bye ??

Home