Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically


A common feature of this family of viruses is that they are memory resident. They infect COM and EXE files when those are started.


When file is opened the virus checks the code which is the source of calling and occasionally causes a cold start.


This virus occasionally alternates a byte during writing a file. That is an extremely dangerous and mean activity. At the end of the file the string PHX” can be seen.

Phx.1286, Phx.1295, Phx.1336

Unlike their foregoers these viruses are encrypted. When writing a file the virus occasionally alters data that should be written.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.