Threat Description

Cleaner

Details

Aliases:Cleaner
Category:Malware
Type:Virus
Platform: W32

Summary



Cleaner is a simple memoryresident virus which infects COM and EXE files when they are executed.

Cleaner activates on the 8th of September on every year. At this date, the virus will display the following text on the screen:

  O  HDD-CLEANER  Version 2.0O
  OCopyright (c) 1997 (1st JAN) O
  OMade in Hungary, SopronO
 DESTRUCTION IN PROGRESS...

After this the virus overwrites the beginning of the hard drive. Only the first 16 sectors are overwritten, so recovery is possible.

Cleaner will also cause different compatibility problems. It was found in the wild in June 1997, after the Hungarian Magazine CHIP accidentally distributed it on their cover CD-ROM.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.








Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More