Virus.BAT.PolyBat

tag:Bat Script-Viruses

0 0

This is a not dangerous nonmemory resident polymorphic BAT virus. It writes itself to the end of the files. When executed it searches for .BAT files in current, parent, current C: drive and root C: directories, then in all PATH directories and infect one batch file that is found.

The virus uses polymorphic BAT engine similar to the "Batalia6" virus - it compresses itself with PKZIP and password, and adds to its entry code "junk" strings.

The virus displays the text:

(: PolyBat Morpher :)

While infecting a file the virus uses external DOS command and utilities: PKZIP, PKUNZIP, ATTRIB, FIND, and fails to infect the files if there are no such programs in PATH.

previous:Virus.BAT.PG94
previous:Virus.BAT.Sakura

Virus Source from:

New articles

HTML_SHELLCOD.SMThis Trojan takes advantage of a vulnerability in Internet Explorer 6, 7, and 8 and allows remote attackers to execute arbitrary code. After succesfully expl...Virus.BAT.Bomgen This virus is a BAT file.The size of the virus varies in size from 3KB to 21KB. Payload...Virus.BAT.Combat.717This is a nonmemory resident harmless BAT virus. When executed, it searches for .BAT files in the current and parent directories, then in directories C:\ , C:\D...Virus.BAT.Gray.705This is not a dangerous nonmemory resident BAT infector. It writes itself to the end of C:\AUTOEXEC.BAT file only. While infecting the virus creates theC:\ADINF...Virus.BAT.Batman.aThis is a memory resident parasitic BAT-file infector. It's easier to show the text of the virus than to say something about its algorithm. The virus text is ve...

Hot Articles

Virus.BAT.PolyBat

Computer Virus Clounds