Details
Win95.Murkry.399
This is a benign non-memory resident parasitic virus infecting Win95 EXE files (PE). When an infected files is executed, the virus searches for all PE-EXE files in the current directory and infects them. While infecting a file the virus writes itself to the not used space in PE header. Because this virus is extremely short (less than 400 bytes), it can find files with such cave in their headers.
The virus have no trigger routines. It contains the text strings:
Murkry
While infecting, this virus uses direct calls to Win95 KERNEL32 and may cause system error messages: under several Win95 releases it accesses KERNEL32 by using wrong addresses.
Related Posts
Win95.Puma.102Win95.Murkry.39Win95.Spawn.4096Win95.Xine2.736Win95.Markj.82
This entry was posted
on Saturday, August 2nd, 2008 at 7:50 pm and is filed under Virus Threats.
Details
Win95.Murkry.390
This is a benign non-memory resident parasitic virus infecting Win95 EXE files (PE). When an infected files is executed, the virus searches for all PE-EXE files in the current directory and infects them. While infecting a file the virus writes itself to the not used space in PE header. Because this virus is extremely short (less than 400 bytes), it can find files with such cave in their headers.
The virus have no trigger routines. It contains the text strings:
MurkryII
This is a bug-fixed version of Murkry.399: before calls to KERNEL32, scans it and searches for address of VxDCall routine that then is used in file access calls.
Related Posts
Win95.Murkry.39Win95.Puma.102Win95.Spawn.4096Win95.Xine2.736Win95.Markj.82
This entry was posted
on Saturday, August 2nd, 2008 at 3:50 pm and is filed under Virus Threats.