Threat Description



Platform: W32


CheapExe is a simple virus which infects EXE files when it is executed. The virus does not stay resident in memory. The virus is encrypted with a variable key.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.


You may wish to refer to the Support Community for further assistance. You may also refer to General Removal Instructions for a general guide on alternative disinfection actions.

Technical Details

CheapExe contains this text, which is never displayed:

I loved you,  I always loved you,  but it was nothing but a waste
of time. May  you  burn  in  the  Hell,  if  it  really  exists, my
little  slut, orsuffer  what  you  made  myfragileand
tender  heartsuffer. This  should  be  the  right  Doom  for
each  fucking  cheater  ......... if  it  was,  it  wouldn't  be
this  one  the  Hell. Ti amavo poiche' mi facevi
tenerezza....adesso ti odio poiche' mi fai schifo a proposito:
Tanti Auguri, Valentina
  ChEaPeXe v1.0 WarBlaDe/LT...

CheapExe is probably written in Italy. It was reported to be in the wild in Finland in December 1996.

Description Created: Mikko Hypponen, F-Secure


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More