1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar







This is a direct action infector of Windows executables.

Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Technical Details

When an infected file is executed, the virus takes control, searches for Windows .EXE files in current directory and writes itself to the end of the file.

While spreading, the virus generates a copy of every infected file, with an EVE extension. For example, a directory with infected PROGRAM.EXE will also have PROGRAM.EVE.

The virus has a trigger routine that just beeps by PC speaker when virus takes control.

Virus contains these texts:

        The three head guardian, is in your computer, fear no more

This virus is written by the IKX group.

Description Created: Eugene Kaspersky

Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.