W95/Marburg

Category: Viruses and Spyware Protection available since:10 Apr 2003 00:00:00 (GMT)
Type: Windows 95 executable file virus Last Updated:06 Jan 2010 14:29:53 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

To avoid infecting the same file twice, it increases the size of infected files to a number divisible by 101. It does not infect any files with V in the name to avoid infecting certain anti-virus programs.

It displays Windows 95 error icons on the screen:

Windows 95 screen with error icons (white cross in red circle).

Marburg was distributed on the second cover-mounted CD of the July 1998 UK edition of the computer magazine PC Gamer.

Marburg is not resident, it is a direct action virus which, when run, searches for executable files to infect in the current directory, the Windows directory and the System directory. Neither has it got any stealth, although if it discovers certain integrity checking databases (e.g. CHKLST.MS) in the above directories it will delete them to try to avoid detection. It triggers on a random date.

download Try Sophos products for free
Download now