Threat Description



Category: Malware
Platform: W32
Aliases: SVC


This is the first Russian "stealth" virus. It has not been analyzed yet, but it contains the text string:

 (c) 1990 by SVC,Vers. 4.0  

A 1740 byte variant with the same message is also known.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

Variant:SVC 3.1

This earlier version is somewhat shorter, only 1064 bytes. One 1228 byte variant might be even older, but it does not contain a version number.

Variant:SVC 5.0

A more recent, improved version of the virus - 3103 bytes long.

Variant:SVC 6.0

Yet another variant, which is able to infect MBR's as well.


This variant activates on June 4th and tries to overwrite part of the hard drive. It was reported to be in the wild in Mosambik in 1996.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More