Threat Description

SVC

Details

Category: Malware
Platform: W32
Aliases: SVC

Summary


This is the first Russian "stealth" virus. It has not been analyzed yet, but it contains the text string:

 (c) 1990 by SVC,Vers. 4.0  

A 1740 byte variant with the same message is also known.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details



Variant:SVC 3.1

This earlier version is somewhat shorter, only 1064 bytes. One 1228 byte variant might be even older, but it does not contain a version number.


Variant:SVC 5.0

A more recent, improved version of the virus - 3103 bytes long.


Variant:SVC 6.0

Yet another variant, which is able to infect MBR's as well.


Variant:SVC.2936

This variant activates on June 4th and tries to overwrite part of the hard drive. It was reported to be in the wild in Mosambik in 1996.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More