Threat Description



Aliases:Leprosy, News Flash
Category: Malware
Platform: W32


The name of the virus is derived from the following message found inside it.

NEWS FLASH!! Your system has been infected with the
  incurable decay of LEPROSY 1.00, a virus invented by
  PCM2 in June of 1990.  Good luck!


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.


You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.

Technical Details

Another variant is known, where the message has been changed to:

ATTENTION!  Your computer has been afflicted with
  the incurable decay that is the fate wrought by
  Leprosy Strain B, a virus employing Cybernetic
  Mutation Technology(tm) and invented by PCM2 08/90.

Infected programs will either display this message or

Program too big to fit in memory

Leprosy is a 666 byte overwriting virus, and infected programs must be deleted, as there is no way to remove the virus. The only thing which is remarkable about it is the fact that the virus is written in C.

Variant:Plague, Viper, Busted

Plague is a slightly shorter variant, 591 bytes long. It contains the following text:

 Autopsy indicates the cause of
death was THE PLAGUE
Dedicated to the dudes at SHHS

Viper is related, but uses a slightly different encryption method and is 840 bytes long. Busted is yet another variant, which contains the text



This variant has been changed quite a bit, probably in order to avoid detection by some anti-virus program. It is also longer - 1972 bytes.

Variant:Leprosy-C, Leprosy-D, Scribble, Seneca, Surfer

Other variants, just as non-interesting as the previous ones.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More