Virus.Win9x.Murkry.390

tag:Executable File and Boot Viruses

0 0

This is a benign non-memory resident parasitic virus infecting Win95 EXE files (PE). When an infected files is executed, the virus searches for all PE-EXE files in the current directory and infects them. While infecting a file the virus writes itself to the not used space in PE header. Because this virus is extremely short (less than 400 bytes), it can find files with such cave in their headers.

The virus have no trigger routines. It contains the text strings:

MurkryII

This is a bug-fixed version of Murkry.399: before calls to KERNEL32, scans it and searches for address of VxDCall routine that then is used in file access calls.

previous:Virus.Win9x.Molly.680
previous:Virus.Win9x.Murkry.399

Virus Source from:

New articles

Virus.Win32.Chop.3808 It is not a dangerous nonmemory resident parasitic polymorphic Win32 virus. It searches for PE EXE files in the current directory, then writes itself to the en...Virus.Win32.Crypto This text was written with the help of Adrian Marinescu, GeCAD Software.This is a very dangerous memory resident parasitic polymorphic Win32 virus about 20K i...Virus.Win32.Delf.k This file virus replaces .exe files with its own body.The virus itself is a Windows PE EXE file 18944 bytes in size, written in Delphi. Payload...Virus.Win32.Devir This is a per-process memory resident parasitic poly-morphic Win32-virus. The virus infects PE EXE files that have .EXE filename extensions. When run, the viru...Virus.Win32.Ditex.aDitex is a memory resident parasitic Win32 virus. It is written in Microsoft Visual C and is about 33KB in size. The virus infects PE EXE files that have .EX...

Hot Articles

Virus.Win9x.Murkry.390

Computer Virus Clounds