Virus Database

Win32.MTV

Description Win32.MTV

This is a very dangerous parasitic Win32 virus that stays in the Windows memory as a usual application, then looks for PE EXE files in all C: drive directories and infects them. The virus uses the "prepending" infection method: while infecting a file, the virus encrypts the file body, shifts it down and writes the virus code to the beginning of the file. To release control to the host program, the virus "disinfects" the host file to a temporary one and spawns it.
This is a "direct action" (find-and-infect) virus, but while searching for files, it "sleeps" for 5 seconds before processing each proceeding file. As a result of this, the virus may stay active in the Windows memory as long as all files on the C: drive are processed.
If any error occurs during the virus run, it displays the message "Sorry." and exits Windows.
On 13th of each month the virus deletes all files on C: drive.
The virus contains encrypted text strings:
LLLP.WIN32.MTV2
MTV-2

Check other viruses! Be aware! Use Antiviral Software

Already.71

Description Already.71

The 71-bytes ALREADY.COM program that caused virus alert message by AVP is not real computer virus. Tt was written as a utility to prevent duplicate program execution and was distributed as a part of some software. This utility just checks the current date and compares it with stored data. If the date is the same (i.e. this program was ALREADY executed today), it returns errorlevel 1. Otherwise it resets those data and returns errorlevel 0. That allows to use this progr
The reason to detect this program as a computer virus is a bug in it. This program does not just update stored data, but completely overwrites the ALREADY.COM file. Moreover, it overwrites it not in the directory where ALREADY.COM is placed, but creates a copy in the current directory. As a result, if this program is in PATH, running it can spread it on the local disks and network - this utility becomes a worm creating its copies everywhere it is run. That is why AVP detects this program as "Already.71" virus.

Alxe.1287

Description Alxe.1287

It is not a dangerous nonmemory resident parasitic virus. It searches for EXE files, then writes itself to the end of the file. On 20th of any month the virus plays the tune. The virus contains the internal text string:
AlEx
*.EXE

Home