Copy Link
Add to Bookmark
Report
PhVx Register
hexfiles issue 2
Last Update: March 1998
PhVx Register
This PhVx listing is divided into three parts. Part I covers PhVx found in the wild a copy of which is in HEX-FILES collection. Part II contains PhVx released through HEX-FILES. Part III are virii mentioned in AVs documentation as originating from the Philippines or from all indications a PhVx. Those mentioned by foreign AVs still needs verification. Virii mentioned in VSUM as originating from the Philippines are not acceptable unless independently corraborated by another source.
The PhVx in Parts I and II were scanned by AVs coming from the Philippines and other countries to cross-reference their identification. Alphabetically, the AVs are:
Philippines: DisCoVir 1.09
ViRem 2.00
Vkill 0.40
World: AVP 3.0 (Kami - Russia)
F-PROT 2.28 (Frisk - Iceland)
Thunderbyte 8.04a (ESaSS - Netherlands)
ViruScan 3.1.4 (McAfee - USA)Philippine AVs are those circulating at school. Foreign AVs were downloaded from their Internet sites. The AVs are not necessarily the latest version but these are those available to me at the time.
The AVs are all evaluation DOS versions. The PhVx were scanned using *AVs default configuration*. (The only option enabled is the scanning log file, if available.) If the AV detects the PhVx through its heuristic or generic algorithms, the identification is prefixed with "=". Example: "=virus", "=Type_ComTSR", "=Jerusalem", etc. A "-" means the AV did not detect the PhVx. (Note: Thunderbyte sometimes reports a file as infected by unknown virus and sometimes not, using its default configuration. This is true for both Duwende and Philippines 1 virii. In such cases it would be noted in this list as detected by unknown virus.)
This is not an endorsement of AVs nor its performance vis-a-vis PhVx. AVs are mentioned here for their virii IDs so that you can find your way through the virus naming mess.
WHAT'S NEW!
** New PhVx from HEX-FILES No. 2
* Preacher.524
* Preacher.549
* Philippines.2796
* Philippines.2833
* Philippines.2888
* Philippines.4096 (Kakabakaba)
** Addition to PhVx Collection
* June12.AntiSPCPD.2660
* Pempe.1943
* Possessed.2167.B
* Windmill
** Added to PhVx list not in Collection
* From McAfee Scan virlist
WPC_ALAEH.2279
WPCB.2793
PART I: PhVx in HEX-FILES Collection
⁄------------------------------------------------------------------------------------------------------------------------ø
| AV Identification of PhVx |
√--------------------------------------------------¬---------------------------------------------------------------------¥
| Philippines | Rest of the World |
⁄-----------------------------------¬--------------------------≈--------------------¬----------------¬------------≈------------------¬----------------¬--------------¬------------------¥
| PhVx Name | Place of Origin | DisCoVir | ViRem | VKill | AVP | F-Prot | Thunderbyte | ViruScan |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
Section A: Boot Virii
⁄-----------------------------------¬--------------------------¬--------------------¬----------------¬------------¬------------------¬----------------¬--------------¬------------------ø
| 1. Microbe |Cebu City |Microbe | - | - |Microbe |Microbes |Microbes |MICROBES |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 2. Sampo |University of the East | | | | | | | |
| |Manila | | | | | | | |
| 2.1. Sampo.A | |Sampo |Sampo |Sampo/69 |Sampo |Sampo |Sampo |SAMPO |
| 2.2. Sampo.B | |Sampo |Sampo |Sampo/69 |Sampo |Sampo |Sampo |SAMPO |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
Section B: File Virii
⁄-----------------------------------¬--------------------------¬--------------------¬----------------¬------------¬------------------¬----------------¬--------------¬------------------ø
| 1. Cara.Standard.1024 |Metro Manila | - | - | - |Cara.1024 |CARA.1025 |Cara |CARA |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 2. Danao |University of Cebu |Danao | - | - |Xed.2869 |XED.2869 |Xed.2869 |_2869 |
| |Cebu City | | | | | | | |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 3. Jerusalem.Bad_Illusion |University of Cebu |Illusion.A |BAD ILLUSIONS |Bad Illusion|Jerusalem.Xed.1238|Jerusalem.1238 |=Jerusalem |JERUSALEM.1200 |
| |Cebu City | | | | | | | |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 4. June 12 |Metro Manila | | | | | | | |
| | | | | | | | | |
| a. June12.Standard.2660 | |June12.2660 |JUNE 12 |June 12 |Mabuhay.2660.a |Mabuhay.2660 |Mabuhay |JUNE_12TH.2660 |
| b. June12.Standard.2695 | |June12.2695 |JUNE 12 |June 12 |Mabuhay.2695 |Mabuhay.2695 |Mabuhay |JUNE_12TH.2660 |
| c. June12.AntiSPCPD.2660 | | - | - | - |Mabuhay.2660.b |Aderror.2660.B |=virus |_2673 |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 5. Msu |Mindanao State University |MSU-IIT |HERMILITO GO/MSU|MSU/JJack |Marawi.2828 |Marawi.2828 |Marawi |P0P.2694 |
| | - Iligan Institute of | | | | | | | |
| | Technology | | | | | | | |
| |Iligan City | | | | | | | |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 6. Oggo.3813 |Adamson University |Oggo.4069 |OGGO |OGGO (AdU) |Oggo.3837 |Oggo.4325 |Oggo |SPLIT.4300 |
| |Manila | | | | | | | |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 7. Pempe |AMA Computer College | | | | | | | |
| |Makati City | | | | | | | |
| a. Pempe.1811 | |Pempe |PEMPE 1.2 |PEMPE |Pempe.1811 |Pempe.1811.A |Pempe.1811 |PEMPE.1811 |
| b. Pempe.1943 | | - | - | - | - | - | - | - |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 8. Possessed |Adamson University | | | | | | | |
| |Manila | | | | | | | |
| a. Possessed.2167.B | |Possessed.2167.B |POSSESSED |Possessed | - |=FaxFree |Possessed.2175|POSSESSED |
| b. Possessed.2367 | |Possessed.2367 |POSSESSED |Possessed |Poss.2367 |Possessed.2367 |Possessed.2438|POSSESSED.2443 |
| c. Possessed.2438 | |Possessed.2438 |POSSESSED |Possessed |Poss.2438 |Possessed.2438 |Possessed.2438|POSSESSED.2443 |
| d. Possessed.2443 | |Possessed.2443 |POSSESSED |Possessed |Poss.2443 |Possessed.2443 |Possessed.2438|POSSESSED.2443 |
| e. Possessed.2446.A | |Possessed.2446.A |POSSESSED |Possessed |Poss.2446.a |Possessed.2446.A|Possessed.2438|POSSESSED.2446.A |
| f. Possessed.2446.B | |Possessed.2446.B |POSSESSED |Possessed |Poss.2446.b |Possessed.2446.B|Possessed.2438|POSSESSED.2443 |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 9. Rebolusyon |Metro Manila |E_Bukid.A |CPP-NPA-NDF |CPP/NPA |Qark.2000.a |_2000 |Quark.2000 |QUARK |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
|10. Tadpole |Cebu Central Colleges |Tadpoles |TADPOLE |TadPole |Tadpole.2792 |Tadpole.2792 | - |TADPOLES.2792 |
| |Cebu City | | | | | | | |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
|11. Wpc_Bats |Lipa City (?) | | | | | | | |
| | | | | | | | | |
| a. Wpc_Bats.Ala-Eh.3072 | | - | - | - |WpcBats.3072 |WPC_Bats.3072 |=virus |WPC_ALAEH.3072 |
| b. Wpc_Bats.Ala-Eh.3161 | |Wpc_Bats.Ala-Eh.3161| - | - |WpcBats.3161 |=WPC_Bats |=virus |WPC_ALAEH.3161 |
| c. Wpc_Bats.Lipa.3207 | |Wpc_Bats.Lipa.3207 | - | - |WpcBats.3207 | - |Lipa.3207 |WPCB.3207 |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
|12. Xtac |University of San Carlos |Xtac |XTAC |XTac/L.Siao |Xtac.1564 |Xtac.1564 |XTAC.1564 |XTAC |
| |Cebu City | | | | | | | |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
Section C: Probable PhVx - Boot Virii
⁄-----------------------------------¬--------------------------¬--------------------¬----------------¬------------¬------------------¬----------------¬--------------¬------------------ø
| 1. Quaint |Metro Manila |Quaint.A | - | - | - | - | - | - |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 2. Windmill |Cebu (?) |=virus | - | - |Windmill |Windmill |Windmill |WINDMILL |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
Section D: Probable PhVx - File Virii
⁄-----------------------------------¬--------------------------¬--------------------¬----------------¬------------¬------------------¬----------------¬--------------¬------------------ø
| 1. Matthew |Metro Manila (Adamson ???)|Matthew |MATTHEW |Matthew |Matthew.3044 |Matthew.3044 |Mathiew.3044 |MATTHEW.3044 |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
PART II: PhVx Released in HEX-FILES
⁄------------------------------------------------------------------------------------------------------------------------ø
| AV Identification of PhVx |
√--------------------------------------------------¬---------------------------------------------------------------------¥
| Philippines | Rest of the World |
⁄-----------------------------------¬--------------------------≈--------------------¬----------------¬------------≈------------------¬----------------¬--------------¬------------------¥
| PhVx Name | Author | DisCoVir | ViRem | VKill | AVP | F-Prot | Thunderbyte | ViruScan |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 1. Cara.Kara.739 | Putoksa Kawayan | - | - | - |Kara.739 | - | - | - |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 2. Duwende | Putoksa Kawayan | | | | | | | |
| | | | | | | | | |
| a. Duwende.409.A | | - | - | - |Duwende.409.a | - |=virus | - |
| b. Duwende.409.B | | - | - | - |Duwende.409.a | - |=virus | - |
| c. Duwende.409.C | | - | - | - |Duwende.409.c | - |=virus | - |
| d. Duwende.409.D | | - | - | - |Duwende.409.d | - |=virus | - |
| e. Duwende.409.E | | - | - | - |Duwende.409.d | - |=virus | - |
| f. Duwende.410.A | | - | - | - |Duwende.410.a | - |=virus | - |
| g. Duwende.410.B | | - | - | - |Duwende.410.b | - |=virus | - |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 3. Philippines | Putoksa Kawayan | | | | | | | |
| | | | | | | | | |
| a. Philippines.2796 | | - | - | - |=Type_ComExeTSR | - |=virus | - |
| b. Philippines.2833 | | - | - | - |=Type_ComExeTSR | - |=virus | - |
| c. Philippines.2888 | | - | - | - |=Type_ComExeTSR | - |=virus | - |
| d. Philippines.3133 | | - | - | - |Nikki.3133 | - | - | - |
| e. Philippines.4096 | | - | - | - | - | - | - | - |
√-----------------------------------≈--------------------------≈--------------------≈----------------≈------------≈------------------≈----------------≈--------------≈------------------¥
| 4. Preacher | Mikee | | | | | | | |
| | | | | | | | | |
| a. Preacher.524 | | - | - | - |=Type_Com | - |=virus | - |
| b. Preacher.549 | | - | - | - |=Type_Com | - |=virus | - |
¿-----------------------------------¡--------------------------¡--------------------¡----------------¡------------¡------------------¡----------------¡--------------¡------------------Ÿ
PART III: PhVx not in HEX-FILE's Collection
⁄-----------------------¬--------------------------ø
| PhVx Name | Reference AV |
√-----------------------≈--------------------------¥
| 1. All System 9 | Cure143 |
√-----------------------≈--------------------------¥
| 2. E_Bukid.B | DisCoVir 1.09 |
√-----------------------≈--------------------------¥
| 3. Lahar | Vir-X Plus 1.51 |
√-----------------------≈--------------------------¥
| 4. Mabuhay.2660.C | AVP 3.0 |
√-----------------------≈--------------------------¥
| 5. Marawi.2719 | Foreign AVs |
√-----------------------≈--------------------------¥
| 6. Matthew.2667 | Foreign AVs |
√-----------------------≈--------------------------¥
| 7. Oggo.4022 | DisCoVir 1.09 |
√-----------------------≈--------------------------¥
| 8. Ornate | Scan |
√-----------------------≈--------------------------¥
| 9. PLM/JLS | ViRem 2.00 |
√-----------------------≈--------------------------¥
|10. Possessed | |
| | |
| a. Possessed 1.00 | Vindicate 1.01 |
| b. Possessed 1.01 | Vindicate 1.01 |
| c. Possessed 1.02 | Vindicate 1.01 |
| d. Possessed 1.04 | Vindicate 1.01 |
| e. Possessed 1.09 | Vindicate 1.01 |
√-----------------------≈--------------------------¥
|11. Quaint.B | DisCoVir 1.09 |
√-----------------------≈--------------------------¥
|12. Wisdom | Vir-X Plus 1.51 |
√-----------------------≈--------------------------¥
|13. WM\Cebu | |
| | |
| a. WM\Cebu.A | Foreign AVs |
| b. WM\Cebu.B | Foreign AVs |
√-----------------------≈--------------------------¥
|14. Wpc_Bats | |
| | |
| a. WPC_ALAEH.2279 | Scan |
| b. WPCB.2793 | Scan |
¿-----------------------¡--------------------------ŸEoF.
