| Description:
|
Details
Win32.AOC
This is a benign non-memory resident parasitic polymorphic Win32 virus. It searches for PE EXE files in the current Windows and Windows system directories and infects them. The virus infects .EXE files as well as .DLL libraries. While infecting, the virus writes itself to the end of the file.
The virus avoids detection in several anti-virus programs by detecting them according to the first two letters in the file name: AV*, AN*, DR*, ER*, OD*, TB*, F-*.
Depending on its "generation," the virus displays the following text:
< [AOC] - Anvil of Crom virus Coded by Bumblebee/29a > |
