Summary
This program is a widely spread dumb joke. Three working and one damaged variants are known. There are also several versions with modified text. The program doesn't contain a virus. There's also no destructive code inside. People often got worried about wether it was damaging or not and asking us why it is not detected. So now it is.
Disinfection & Removal
Allow F-Secure Anti-Virus to disinfect the relevant files.
For more general information on disinfection, please see Removal Instructions.
Technical Details
When this program is run from Windows it shows a dialog with this text:
Do you have a small peni* ?
The dialog has Yes/No buttons. The user can't press the No button as it changes its position every time mouse cursor is placed on it.
If the program is started from DOS session in Windows it does nothing. If it is started from DOS it searches for 'WIN.COM' file in all directories listed in 'PATH' variable (in DOS environment), loads it to memory and launches it. The command line for 'WIN.COM' is modified the way that the program will be executed automatically after Windows startup. When started this way it will show the same dialog.
Technical Details: Alexey Podrezov, F-Secure
Submit a sample
Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)
F-Secure Community
Give advice. Get advice. Share the knowledge on our free discussion forum.