Simpleton antivirus

Simpleton antivirus is a simple computer virus which consists of batch files and shortcuts. It is referred to as a virus as it copies itself into the startup. It is very simple and consists of batch files that run shutdown scripts and opens many command prompt windows, it is also very easy to remove. It was found on a torrent website. There is no major threat and cannot copy itself to other computers.

Other names

SAV, sav, Sav2008, Simpleton Antivirus 2008 3.0.56.2 - Cracked - Rayz0r

Effects

Once file is run it copies itself into the startup folders, kills all antivirus processes and then proceeds to open many command prompt windows followed by a 60 second shutdown timer. The pc restarts and the virus runs on startup and it all happens again.

Some variations of this batch file virus contain the "format C:" Command which automatically formats hard drives without warning.

Removal

To Remove this Virus, once windows has started up and the virus is running and the 60 second shutdown timer is counting down, click start and click run and type "shutdown -a" (without the ") then delete all files associated with Simpleton Antivirus and delete sav and vscan batch files from the startup folder.

Files

Files associated or part of simpleton antivirus are:

sav.bat - secondary bat file that copies vscan into startup.
sav.cab - Fake cab file, used to make virus filesize look larger.
setup.exe.lnk - shortcut file disguised as a setup icon.
vscan.bat - The main Virus file.

http://img217.imageshack.us/my.php?image=savix3.jpg <---- Image of files.