![news](../../nav/left_nav__01.gif)
![products](../../nav/left_nav__02.gif)
![service / support](../../nav/left_nav__03.gif)
![virus info](../../nav/left_nav_roll__04.gif)
![](../../virus/nav/subnav_01.gif)
![](../../virus/nav/subnav_02lit.gif)
![](../../virus/nav/subnav_03.gif)
![](../../virus/nav/subnav_04.gif)
![](../../virus/nav/subnav_05.gif)
![](../../virus/nav/subnav_06.gif)
![](../../virus/nav/subnav_07.gif)
![](../../virus/nav/subnav_08.gif)
![](../../service/nav/line.gif) ![reseller center](../../nav/left_nav__05.gif)
![about / contact](../../nav/left_nav__06.gif)
![downloads](../../nav/left_nav__07.gif)
![search / map](../../nav/left_nav__08.gif)
![try / buy](../../nav/left_nav__09.gif) |
![](../../transparent.gif) |
CPW.1527
Aliases: Mediera, Mierda Size: 1527 bytes Frequency: 1
Characteristics:
- Infects COM files
- Infects EXE files
- Memory resident
- Contains clear text string or message
- Has triggered warhead / payload that causes damage
- Seeks COMMAND.COM and infects it
- Targets AV product(s)
- Targets AV integrity information
Information:
"CPW fue hecho en Chile en 1992", "C:\COMMAND.COM", and a profane phrase (in Spanish). Deletes files on May 27, September 11, and December 28. Deletes several antivirus programs. Removes integrity files of CPAV and MSAV.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
|