| Description:
|
Details
Win32.Atav.1939
This is a dangerous, non-memory resident encrypted parasitic Win32 virus. It searches for PE EXE files in the current directory, then writes itself to the end of the file. The infection procedure is buggy and destroys the PE-file structure, and most of infected files become corrupted.
The virus contains the following "copyright" and other text strings:
Win9x.ATAV (c)oded by Radix16[MIONS]
AVG?????.DAT
AVP.CRC
ANTI-VIR.DAT
CHKLIST.MS
AVP Monitor
AVG Control Center
It seems the virus author intended to delete anti-virus files and kill anti-virus processes, but such routines are not executed. |
