Virus Database

Win32.Asorl

Description Win32.Asorl

This is a relatively harmless, non-resident parasitic Win32 virus.
The virus searches for Win32 EXE applications (PE EXE files) in the current directory and Windows directory.
The virus infects up to 5 files in the directory.
While infecting, the virus writes itself to the end of the file.
If the current date is July 28, the virus displays the following message box:
__________________________________________________
lWin32/AstroGirl AstroCoded by a Wazex l
l________________________________________________l
lYour system is infected by Win32/AstroGirl v1.0 l
lDedicated to Anita and our peng-guin ;) l
l SmuakssSsssss!!!! l
l________________________________________________l

Check other viruses! Be aware! Use Antiviral Software

BAT.PG94

Description BAT.PG94

It is a harmless nonmemory resident parasitic BAT virus. It searches for BAT files, then writes itself to the beginning of the file. While infecting a file the virus creates temporary #PG94.~ file in DOS directory, and fails to infect, if there's no such directory on the current drive. The virus also uses the FIND utility, and fails to infect the files if there is no such utility in PATH.
The virus contains the text:
Ha ha ha! Cybrphuc '94

BAT.PolyBat

Description BAT.PolyBat

This is a not dangerous nonmemory resident polymorphic BAT virus. It writes itself to the end of the files. When executed it searches for .BAT files in current, parent, current C: drive and root C: directories, then in all PATH directories and infect one batch file that is found.
The virus uses polymorphic BAT engine similar to the "Batalia6" virus - it compresses itself with PKZIP and password, and adds to its entry code "junk" strings.
The virus displays the text:
(: PolyBat Morpher :)

While infecting a file the virus uses external DOS command and utilities: PKZIP, PKUNZIP, ATTRIB, FIND, and fails to infect the files if there are no such programs in PATH.

Home