CheapExe

Summary

---

CheapExe is a simple virus which infects EXE files when it is executed. The virus does not stay resident in memory. The virus is encrypted with a variable key.

Removal

---

Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.

Technical Details

---

CheapExe contains this text, which is never displayed:

I loved you,  I always loved you,  but it was nothing but a waste    of time. May  you  burn  in  the  Hell,  if  it  really  exists, my    little  slut, or   suffer  what  you  made  my   fragile   and    tender  heart   suffer. This  should  be  the  right  Doom  for    each  fucking  cheater  ......... if  it  was,  it  wouldn't  be    this  one  the  Hell. Ti amavo poiche' mi facevi    tenerezza....adesso ti odio poiche' mi fai schifo a proposito:    Tanti Auguri, Valentina   ChEaPeXe v1.0    ...by WarBlaDe/LT...  

CheapExe is probably written in Italy. It was reported to be in the wild in Finland in December 1996.

Description Details: Mikko Hypponen, F-Secure