W32.Lad.1916

W32.Lad.1916 is a virus that runs on all Windows 32-bit platforms (95/98/Me/NT/2000). It is a direct infector, and it infects Microsoft Portable Executable (PE) files. When executed, the virus does not go memory resident. Instead, the virus attempts to infect files in the \Windows and the \Windows\System folders, and in the same folder as the virus.

Its payload is executed on the 19th of every month, and it displays a short message.



What are Portable Executable (PE) files?
PE files are files that are portable across all Microsoft 32-bit operating systems. The same PE-format executable can be executed on any version of Windows 95, 98, Me, NT, and 2000. Therefore, all PE files are executable, but not all executable files are portable.

A good example of a Portable Executable is a screen saver (.scr) file.