Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Purcyst


Aliases:


Purcyst

Malware
Virus
W32

Summary

This is a boot virus. One unusual feature of this virus is that it infects both MBR and DBR on hard drives.

This virus also modified the CMOS settings of the machine in order to spoof a clean boot. Check that your drive A: settings are correct in CMOS Setup before booting clean and disinfecting the virus.

The code of the virus contains this text:

PUR'CYST

Otherwise the virus only spreads.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.







Description Created: Mikko Hypponen, F-Secure



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.