Details
Win95.Puma.1024

This is not a memory resident Win95-virus. It searches for PE-EXE files in the current directory and infects them. While infecting the virus appends new section (name - “.murkry”) to the end of the file and writes itself to there, then it modifies the file PE-header. The virus contains the strings:
FindFirstFileA
FindNextFileA
CreateFileA
_lclose
SetFilePointer
ReadFile
WriteFile
*.EXE
.murkry

Related Posts

This entry was posted on Monday, August 4th, 2008 at 7:50 am and is filed under Virus Threats.