Copy Link
Add to Bookmark
Report
Hexfiles Issue 4 File 019
HEX-FILES No. 4 File 019
----------------------------------------------------------------------------
Date: November 27, 1998
phVX Register
This phVX listing is divided into four parts:
Part I covers phVX found in the wild a copy of which is in
HEX-FILES collection. This is further subdivided into
sections. Viruses in Sections A and B are confirmed
phVX and the rest are probable phVX.
Part II covers phVX published in HEX-FILES.
Part III covers viruses found in Filipino virus authors' web
sites.
Part IV covers viruses mentioned in AVs virus lists and
documentations as originating from the Philippines or
from indications the virus is from the Philippines.
The origin of viruses in Part IV still needs verification. When a
copy is obtained and the source could not be ascertained, this would
be placed under probable phVX until such time the origin of the virus
is determined. Viruses mentioned in VSUM as originating from the
Philippines are not acceptable unless independently corraborated by
another source.
The phVX in Parts I, II and III were scanned using AVs coming from
the Philippines and other countries. Their identifications are then
cross-referenced. Alphabetically, the AVs are:
Philippines: DisCoVir 1.10
First-Aid 1.02
ViRem 2.00a
Vkill 0.81
World: AVP 3.0 b124 up981114
F-Prot 3.03
FindVirus 7.88
Sweep 3.15
Thunderbyte 8.08b
ViruScan 3.1.9 v3110
Philippine AVs were downloaded from Philippine AVs' web site
(http://members.xoom.com/phil_av/) or the AV's web site. Foreign AVs
were downloaded from their own web sites or pro-AV ftp sites. The AVs
are not necessarily the latest versions.
The following conditions are followed during scanning:
1. The AVs used are all evaluation DOS versions. DOS command-
line version of the AV is used, if available.
2. Options to improve the AVs identification of phVX are
enabled.
3. The infected files used are COM programs, that is, if the
virus is able to infect COM programs. Otherwise, EXEs are
used. The host programs are those that appeared in HEX-FILES
as debug scripts or a file containing similar instructions.
Macro viruses are scanned from an infected document.
4. The entire file infecting virus collection is scanned using
each AV program.
5. Boot sector infectors are scanned from a file image of their
boot sector codes. If the AV does not support scanning of
boot infector file images, these are scanned from 1.44 mb
diskettes. For viruses that could not infect 1.44 mb
diskettes, the virus boot sector is forced patched to a 1.44
mb diskette boot sector.
6. If the AV detects the phVX through its heuristic or generic
algorithms but does not mention a specific virus name, the
identification is prefixed with "=" as in "=Type_ComTSR",
"=virus".
phVX that are detected but the AV is not definite on its
identification (such as in "This virus is like...", "new or
modified variant of...", "...related", "...unknown?", and the
like), the virus name used by the AV is preceded by a "=" as
in "=WpcBats", "=June12th", etc.
A "-" means the AV did not detect the phVX.
This is not an endorsement of AVs nor their performance vis-a-vis
phVX. AVs are mentioned here for their virus IDs so that you can find
your way through the virus naming mess.
--------------------------------------------------------------------
New viruses added to collection:
From N.O.Phoenix:
Rebolusyon.2000.B
Wpc_Bats.Ala-Eh.2279
Wpc_Bats.Lipa.2793
From VirusBuster:
June12.AntiSPCPD.2660.B
Possessed.2167.A
Possessed.2446.C (won't be listing this one)
XM/Laroux.E
Added new viruses posted in Pinoy Virus Writers web site.
And, the new word macros submitted by Lorz for HEX-FILES No. 4.
My copy of Windmill came from Cicatrix, this was about a year ago.
Better late than never. :)
--------------------------------------------------------------------
------------------------------------
PART I: phVX in HEX-FILES Collection
------------------------------------
Ú-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------¿
| AV Identification of phVX |
Ã-------------------------------------------------------------------------------------------------------Â-----------------------------------------------------------------------------------------------------------------------------------------------------------´
| Philippines | Rest of the World |
Ú--------------------------------------Â-----------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------´
| phVX Name | Place of Origin | DisCoVir | First-Aid | ViRem | VKill | AVP | F-Prot | FindVirus | Sweep | Thunderbyte | ViruScan |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
Section A: Boot Virus
Ú--------------------------------------Â-----------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------¿
| 1. Microbe |Cebu City |Microbe |Microbe | - | - |Microbe |Microbes |Microbe |Microbes |Microbes |MICROBES |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. Sampo |University of the East | | | | | | | | | | |
| |Manila | | | | | | | | | | |
| a. Sampo.A | |Sampo |Sampo |Sampo |Sampo/69 |Sampo |Sampo |Sampo |Wllop |Sampo |SAMPO |
| b. Sampo.B | |Sampo |Sampo |Sampo |Sampo/69 |Sampo |Sampo |Sampo |Wllop |Sampo |SAMPO |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
Section B: File Virus
Ú--------------------------------------Â-----------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------¿
| 1. Cara.Standard.1024 |Metro Manila | - | - | - | - |Cara.1024 |CARA.1025.A |Cara.1025 |CARA-1024 |Cara |CARA |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. Danao |University of Cebu, Cebu City|Danao |Xed.2869 |DANAO/XED | - |Xed.2869 |XED.2869 |Xed.2869 |Xed.2869 |Xed.2869 |_2869 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 3. Jerusalem | | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Jerusalem.AllSystem9 |Metro Manila |AllSystem |Jerusalem.AllSystem.1818 |ALLSYS9 |AllSys 9 |All.1818 |Jerusalem.AllSystem |Jeru.All_System |All-1818 |Jerusalem.All_System |JERUSALEM.ALLSYSTE |
| b. Jerusalem.Bad_Illusion |University of Cebu, Cebu City|Illusion.A |Illusion.1238.A |BAD ILLUSIONS |Bad Illusion |Jerusalem.Xed.1238 |Jerusalem.1238 |Xed.1238 |Jerusalem Xed |=Jerusalem |JERUSALEM.1200 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 4. June12 |Metro Manila | | | | | | | | | | |
| | | | | | | | | | | | |
| a. June12.Standard.2660 | |June12.2660.A |June12th.2660 |JUNE 12 |June 12 |Mabuhay.2660.a |Mabuhay.2660.A |June12th.2672 |Mabuhay |Mabuhay |JUNE_12TH.2660 |
| b. June12.Standard.2695 | |June12.2695 |June12th.2695 |JUNE 12 |June 12 |Mabuhay.2695 |Mabuhay.2695 |June12th.2711 |Mabuhay-2695 |Mabuhay |JUNE_12TH.2660 |
| c. June12.AntiSPCPD.2660.A | |June12.2660.B |June12th.AntiSPCPD.2660 | - | - |Mabuhay.2660.b |Mabuhay.2660.B |XMarks.2673 |XMarks.2673 |=virus |A3 |
| d. June12.AntiSPCPD.2660.B | |June12.2660.B | - | - | - |Mabuhay.2660.b |Mabuhay.2660.C |Jerusalem.2660 |XMarks.2673 |=virus |A3 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 5. Matthew |Saint Louis University | | | | | | | | | | |
| |Baguio City | | | | | | | | | | |
| a. Matthew.2667 | | - | - | - | - |Matthew.2667 |Matthew.2667 |Matthew.mp.2667 |Matthem.2667 |Mathiew.2667 |MATTHEW-2667 |
| b. Matthew.3044.A | |Matthew |Matthew.3044 |MATTHEW |Matthew |Matthew.3044 |Matthew.3044.A |Matthew.mp.3044 |Matthew-3044 |Mathiew.3044 |MATTHEW.3044 |
| c. Matthew.3044.B | |Matthew |Matthew.3044 |MATTHEW |Matthew |Matthew.3044 |Matthew.3044.B |Matthew.mp.3044 |Matthew-3044 |Mathiew.3044 |MATTHEW.3044 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 6. Msu |Mindanao State University - |MSU-IIT |MSU.2828.A |HERMILITO GO/MSU |MSU/JJack |Marawi.2828 |Marawi.2828.A |Marawi.2828.a |Marawi |Marawi |P0P.2694 |
| | Iligan Institute of | | | | | | | | | | |
| | Technology | | | | | | | | | | |
| |Iligan City | | | | | | | | | | |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 7. Oggo.3813 |Adamson University, Manila |Oggo.4069 |Oggo.4325.A |OGGO |OGGO (AdU) |Oggo.3837 |Oggo.4325 |=Oggo |TPE |Oggo |SPLIT.4300 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 8. Pempe |AMA Computer College | | | | | | | | | | |
| |Makati City | | | | | | | | | | |
| a. Pempe.1811 | |Pempe.1811 |Pempe.1811 |PEMPE 1.2 |PEMPE |Pempe.1811 |Pempe.1811.A |Pempe.1811 |Pempe 1.2 |Pempe.1811 |PEMPE.1811 |
| b. Pempe.1943 | |Pempe.1943 |Pempe.1943 |PEMPE 1.6 | - |Pempe.1943 |Pemp.1943 |=Pempe |Pempe.1943 |Pempe.1943 |PEMPE.1943 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 9. Possessed |Adamson University, Manila | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Possessed.2167.A | |=Possessed | - |POSSESSED I |Possessed |Poss.2175 |Possessed.2167.B |Posessed.2167.a |Possessed.2175 |Possessed.2175 |POSSESSED |
| b. Possessed.2167.B | |Possessed.2167.B |Possessed.2167.B | - | - |Poss.2167 |Possessed.2167.C |Posessed.2167.b |Possessed.2167 |Possessed.2175 |POSSESSED |
| c. Possessed.2367 | |Possessed.2367 |Possessed.2367 |POSSESSED |Possessed |Poss.2367 |Possessed.2367.A |Posessed.2367 |Possessed-2367 |Possessed.2438 |POSSESSED.2443 |
| d. Possessed.2438 | |Possessed.2438 |Possessed.2438 |POSSESSED |Possessed |Poss.2438 |Possessed.2438 |Posessed.2438 |Poss-2438 |Possessed.2438 |POSSESSED.2443 |
| e. Possessed.2443 | |Possessed.2443 |Possessed.2443 |POSSESSED |Possessed |Poss.2443 |Possessed.2443 |Posessed.2443 |Possessed-2443 |Possessed.2438 |POSSESSED.2443 |
| f. Possessed.2446.A | |Possessed.2446.A |Possessed.2446.A |POSSESSED |Possessed |Poss.2446.a |Possessed.2446.A |Posessed.2446b |Possessed-2446 |Possessed.2438 |POSSESSED.2446.A |
| g. Possessed.2446.B | |Possessed.2446.B |Possessed.2446.B |POSSESSED |Possessed |Poss.2446.b |Possessed.2446.B |Posessed.2446a |Possessed-2446b |Possessed.2438 |POSSESSED.2443 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|10. Rebolusyon |Metro Manila | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Rebolusyon.2000.A | |E_Bukid.A |Quark.2000.A |CPP-NPA-NDF |CPP/NPA |Qark.2000.a |_2000 |Quark.2000.GR |Qark.2000 |Quark.2000 |QUARK |
| b. Rebolusyon.2000.B | |E_Bukid.B |Quark.2000.B |CPP-NPA-NDF | - |Qark.2000.b |QU.2000 |Quark.2000.GR |Bzy-2000 |Quark.2000 |QUARK.2000 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|11. Tadpole |Cebu Central Colleges |Tadpoles |Tadpoles.2792 |TADPOLE |TadPole |Tadpole.2792 |Tadpole.2792 |Tadpole.2792 |Tadpole.2792 | - |TADPOLES.2792 |
| |Cebu City | | | | | | | | | | |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|12. Wpc_Bats |Lipa City (?) | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Wpc_Bats.Ala-Eh.2279 | |Wpc_Bats.Ala-Eh.2279 |WPC_BATS.Ala-eh.2279 | - | - |WpcBats.2279 |WPC_Bats.2279 |WPCB.2279 |Ala-eh |Ala-eh.2279 |WPC_ALAEH.2279 |
| b. Wpc_Bats.Ala-Eh.3072 | |Wpc_Bats.Ala-Eh.3072 |WPC_BATS.Ala-eh.3072 |ALA-EH! |Ala-Eh |WpcBats.3072 |WPC_Bats.3072 |WPCB.3072 |WPCB-3072 |=virus |WPC_ALAEH.3072 |
| c. Wpc_Bats.Ala-Eh.3161 | |Wpc_Bats.Ala-Eh.3161 |WPC_BATS.Ala-eh.3161 |ALA-EH! 2 |Ala-Eh |WpcBats.3161 |Ala-Eh.3161 |WPCB.3161b.dam |WpcBats-3161 |=virus |WPC_ALAEH.3161 |
| d. Wpc_Bats.Lipa.2793 | |Wpc_Bats.Lipa.2793 |WPC_BATS.Lipa.2793 | - | - |WpcBats.2793 |WPC_Bats.2793 |WPCB.2793 |WPCB-2793 |=virus |WPCB.2793 |
| e. Wpc_Bats.Lipa.3207 | |Wpc_Bats.Lipa.3207 |WPC_BATS.Lipa.3207 | - | - |WpcBats.3207 |WPC_Bats.3199 |WPCB.3207 |WPCB-3207 |Lipa.3207 |WPCB.3207 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|13. XM/Laroux.E |Metro Manila | - | - | - | - |Marco.Excel.Laroux.c |XM/Laroux.E |XM/Laroux.e |Excel/Laroux-C |XM/Laroux.BH |XM/LAROUX.E |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|14. Xtac |University of San Carlos |Xtac |Xtac.1564.A |XTAC |XTac/L.Siao |Xtac.1564 |Xtac.1564 |XTAC.1564 |XTAC-1564 |XTAC.1564 |XTAC |
| |Cebu City | | | | | | | | | | |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
Section C: Probable phVX - Boot Virus
Ú--------------------------------------Â-----------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------¿
| 1. Quaint |Metro Manila (?) | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Quaint.A | |Quaint.A |Quaint.A | - | - |Quaint | - | - |Quaint | - | - |
| a. Quaint.B | |Quaint.B |Quaint.B | - | - |Quaint.B |Vision.B |Vision.B |Mutation Eng-E | - | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. Windmill |Cebu (?) |=virus |Windmill | - | - |Windmill |Windmill |Windmill |Windmill |Windmill |WINDMILL |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
----------------------------
PART II: phVX From HEX-FILES
----------------------------
Ú-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------¿
| AV Identification of phVX |
Ã-------------------------------------------------------------------------------------------------------Â-----------------------------------------------------------------------------------------------------------------------------------------------------------´
| Philippines | Rest of the World |
Ú--------------------------------Â-----Â-----------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------´
| phVX Name |HF No| Author | DisCoVir | First-Aid | ViRem | VKill | AVP | F-Prot | FindVirus | Sweep | Thunderbyte | ViruScan |
Æ--------------------------------Ø-----Ø-----------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------Ø-------------------------µ
| 2. Cara | | | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. Cara.Standard.1024.B | 1 | [1] | - | - | - | - |Cara.1024 |CARA.1025.B |Cara.1025 |CARA-1024 |Cara |CARA |
| b. Cara.Kara.739 | 1 | Putoksa Kawayan | - |Kara.739 | - | - |Kara.739 |Kara.739 |Kara.739 |Kara.739 | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. Duwende | | Putoksa Kawayan | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. Duwende.409.A | 1 | | - |Duwende.409 | - | - |Duwende.409.a |Duwende.409.A |Duwende.GR |Duwende | - | - |
| b. Duwende.409.B | 1 | | - |Duwende.409 | - | - |Duwende.409.a |Duwende.409.A |Duwende.GR |Duwende | - | - |
| c. Duwende.409.C | 1 | | - |Duwende.409 | - | - |Duwende.409.c |Duwende.409.B |Duwende.GR |Duwende | - | - |
| d. Duwende.409.D | 1 | | - |Duwende.409 | - | - |Duwende.409.d |Duwende.409.C |Duwende.GR |Duwende | - | - |
| e. Duwende.409.E | 1 | | - |Duwende.409 | - | - |Duwende.409.d |Duwende.409.D |Duwende.GR |Duwende | - | - |
| f. Duwende.410.A | 1 | | - |Duwende.410 | - | - |Duwende.410.a |Duwende.410.A |Duwende.GR |Duwende | - | - |
| g. Duwende.410.B | 1 | | - |Duwende.410 | - | - |Duwende.410.b |Duwende.410.B |Duwende.GR |Duwende | - | - |
| h. Duwende.734.A | 3 | | - | - | - | - |Duwende.734.a |Duwende.734.A |=virus |Duwende.734 | - | - |
| i. Duwende.734.B | 3 | | - | - | - | - |Duwende.734.b |Duwende.734.B |=virus |Duwende.734 | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 3. June12.Sentenaryo | | Putoksa Kawayan | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. June12.Sentenaryo.1898.A | 3 | | - |June12th.Sentenaryo.1898 | - | - |Mabuhay.1908 |Mabuhay.1908 |Sentenar.1898.a |Junk/Senten1898 |=virus | - |
| b. June12.Sentenaryo.1898.B | 3 | | - |June12th.Sentenaryo.1898 | - | - |Mabuhay.1908 |Mabuhay.1908 |Sentenar.1898.b.dr |Junk/Senten1898 |=virus | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 4. Kontragapi | | Putoksa Kawayan | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. Kontragapi.2274 | 3 | | - | - | - | - |Kontragapi |Kontragapi.2274 |=virus |Mid/Kontragapi | - | - |
| b. Kontragapi.2292 | 3 | | - | - | - | - |Kontragapi |Kontragapi.2292 | - | - | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 5. Philippines | | Putoksa Kawayan | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. Philippines.2796 | 2 | | - | - | - | - |Likha.2796 |Phillippines.2796 |Phil.2796 |Philippines2796 |=virus | - |
| b. Philippines.2833 | 2 | | - | - | - | - |Likha.2833 |Phillippines.2833 |Phil.2833 |Philippines2833 |=virus | - |
| c. Philippines.2888 | 2 | | - | - | - | - |Marawi.2888 |Marawi.2888 |Mara.2288 |Philippines2904 |=virus | - |
| d. Philippines.3133 | 1 | | - | - | - | - |Nikki.3133 |Nikki.3133 |Phil.3133 |Philippine.3133 | - | - |
| e. Philippines.4096 | 2 | | - | - | - | - |Likha.4096 |Phillippines.4096 |Phil.4096.mp |Philippines4096 | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 6. Preacher | | Mikee | | | | | | | | | | |
| | | | | | | | | | | | | |
| a. Preacher.524 | 2 | | - |Preacher.524 | - | - |Preacher.524 |Preacher.524 | - |Preacher |=virus | - |
| b. Preacher.549 | 2 | | - |Preacher.549 | - | - |Preacher.549 |Preacher.549 | - |Preacher |=virus | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 7. StowAway.888 | 3 | Mikee | - | - | - | - |Nomad.888 |Nomad.888 |=virus |Nomad-888 |=virus | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 8. W97M/Margaret | 4 | Lorz | - | - | - | - | - | - | - | - | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 9. W97M/Mary | 4 | Lorz | - | - | - | - | - | - | - | - | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|10. W97M/Mykah | 4 | Lorz | - | - | - | - | - | - | - | - | - | - |
Ã--------------------------------Å-----Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|11. YeZ.1155 | 3 | YeZ | - |Yez.1155 | - | - |PhVx.1155 |Yez.1155 |Yez.1155 |Yez.1155 |=virus | - |
Ã--------------------------------Á-----Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------´
| |
| [1] I am responsible for this but it was unintentional. |
| |
À----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------Ù
--------------------------------------------------------
PART III: phVX Found in Filipino Virus Authors Web Sites NOTE: Name of virus in this segment is followed from that used in the web site where the virus was found and/or the preference of the author.
--------------------------------------------------------
Ú-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------¿
| AV Identification of phVX |
Ã-------------------------------------------------------------------------------------------------------Â-----------------------------------------------------------------------------------------------------------------------------------------------------------´
| Philippines | Rest of the World |
Ú--------------------------------------Â-----------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Å-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------´
| phVX Name | Author | DisCoVir | First-Aid | ViRem | VKill | AVP | F-Prot | FindVirus | Sweep | Thunderbyte | ViruScan |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
Section A: Mikee's World [web site is currently down]
Ú--------------------------------------Â-----------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------¿
| 1. Hellraiser |Mikee | - |HellRaiser.1587 | - | - |Hail.1587 |HeyItsMe.1587 |Hail.1587 |Hail-1603 |=virus | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. New World |Mikee | - | - | - | - |NWO.833 |=virus |NWO.833 |Junk/N.W.O.833 |=virus | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 3. StowAway 2 |Mikee | | | | | | | | | | |
| | | | | | | | | | | | |
| a. StowAway 2A | | - | - | - | - |Nomad.1354 |Norma.1354 |Nomad.1354 |Nomad.1354 |=virus | - |
| b. StowAway 2B | | - |StowAwayII.1302 | - | - |Lefthome.1302 |Nomad.1302 |Nomad.1302 |Nomad-1302 |=virus | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 4. WM/MikEvelyn |Mikee | - | - | - | - |Macro.Word.Mikevelyn |WM/NJ-WMDLK1.O |WM/NJ-DLK1.o |Winword/WMDLK |WM/NJ-WMDLK1.O |NJ-WMDLK1.O |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 5. W97M/Virus1 |Mikee | - | - | - | - |Macro.Word97.Lopez |W97M/Evelyn.A |W97M/Evelyn |WM97/FuddyDuddy |W97M/Evelyn.A |EVELYN.A |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 6. W97M/Satan666 |Mikee | - | - | - | - |Macro.Word97.Satan |W97M/Satan.A |W97M/Satan.a |WM97/Lucifer |W97M/Satan.A |SATAN.A |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
Section B: Pinoy Virus Writers
http://sourceofkaos.com/homes/brianjan/
Webmaster: Zoom23 (brianjan@mailcity.com)
Ú--------------------------------------Â-----------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------Â-------------------------¿
| 1. A13495 |Zoom23 | | | | | | | | | | |
| | | | | | | | | | | | |
| a. A13495.A | | - |HLLO.A134-95.5376 | - | - |HLLP.Carol.20500 | - |HLL.5381 |Hll-A134a.5381 |=virus |HLL.5381 |
| b. A13495.B | | - |HLLO.A134-95.3968 | - | - |HLLO.3968 |HLLO.3968 |HLL.ow.3968 |HLL-3968 | - |HLLO.3968 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 2. Carol_C |Zoom23 | - |HLLP.Carol.4869 | - | - |HLLP.Carol.20500 | - |HLL.4869 |Carol.10250 |=virus |HLLT.4869 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 3. Cheska |Zoom23 | | | | | | | | | | |
| | | | | | | | | | | | |
| a. Cheska 1 | | - |HLLP.Cheska.4630 | - | - |HLLP.Cheska.4630 | - | - |Cheska.4630 | - |HLLT.4630 |
| b. Cheska 2 | | - |HLLP.Cheska2.4631 | - | - | - | - | - | - | - | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 4. HappyB |Zoom23 | | | | | | | | | | |
| | | | | | | | | | | | |
| a. HappyB.A | | - |HLLP.Brian.4933 | - | - |HLLP.Brian.4933 | - | - | - |=virus | - |
| b. HappyB.B | | - |HLLP.Brian2.4725 | - | - |HLLP.BJVC.4725 | - | - |Hll-Bjvc2.4725 |=virus |HLLT.4725 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 5. HungryB |Zoom23 | - |HLLP.Hungry.4949 | - | - |HLLP.Brian.4949.a |HLLP.4949.A |HLLT.4949a |HLL-4949-A | - |HLLT.4949.B |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 6. Jojo |Zoom23 | - |HLLP.Jojov.4709 | - | - |HLLP.Brian.4709.a |HLLP.4709 |HLLT.4709a |HLL-4709-A |=virus |HLLT.4709.B |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 7. Lugad |Zoom23 | - |HLLP.Lugad.4805 | - | - |HLLP.Lugad.4805 |HLLP.4805 |HLLT.Lugad.4805 |Lugad.4805 |=virus |HLLT.4805 |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 8. Nalen |Zoom23 | - |HLLP.Nalen.4709 | - | - |HLLP.Brian.4709.b |HLLP.4709 |HLLT.4709b |HLL-4709-B |=virus |HLLT.4709.A |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
| 9. No_Overtime |Zoom23 | - |HLLP.OverTime.4949 | - | - |HLLP.Brian.4949.b |HLLP.4949.B |HLLT.4949b |HLL-4949-B | - |HLLT.4949.A |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|10. Pinoy_Freak |Zoom23 | - |HLLC.Pfreak.5728 | - | - |HLLC.5728 |HLLC.5728 |HLL.cmp.5728 |HLL-5728 | - |FREK.COMP |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|11. Siri |Zoom23 | - |HLLP.Siri.4996 | - | - |HLLP.Siri.4996 | - | - |Hll.Siri.4996 |=virus | - |
Ã--------------------------------------Å-----------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------Å-------------------------´
|12. Sui_Generis |Zoom23 | - |HLLP.SuiGen.5674 | - | - |HLLP.Sui.5674 | - | - |SuiGen-5674 | - | - |
À--------------------------------------Á-----------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Á-------------------------Ù
------------------------------------------
PART IV: phVX not in HEX-FILE's Collection
------------------------------------------
Ú-----------------------Â-------------------Â------------------------------------------¿
| phVX Name | Reference AV | Remarks |
Æ-----------------------Ø-------------------Ø------------------------------------------µ
| 1. Ermita_Vice | VS | |
Ã-----------------------Å-------------------Å------------------------------------------´
| 2. Excel.Macro.Laroux | | has hidden worksheet named: |
| | documented by | |
| b. XM/Laroux.AF | Philippine AV web | MERALCO |
| c. XM/Laroux.CN | site at xoom.com | SGV |
Ã-----------------------Å-------------------Å------------------------------------------´
| 3. Jerusalem.amacc | VS | |
Ã-----------------------Å-------------------Å------------------------------------------´
| 4. Lahar | Vir-X Plus 1.51 | said to be stoned related |
Ã-----------------------Å-------------------Å------------------------------------------´
| 5. Marawi | | |
| | | |
| a. Marawi.2719 | Foreign AVs | |
| b. Marawi.2828.B | F-Prot 3.00 | |
Ã-----------------------Å-------------------Å------------------------------------------´
| 6. Oggo | | |
| | | |
| a. Oggo.3830 | AVP 3.0 u980531 | |
| b. Oggo.4022 | DisCoVir 1.09 | |
Ã-----------------------Å-------------------Å------------------------------------------´
| 7. OldSampo | DisCoVir 1.10 | said to be an older version of Sampo |
Ã-----------------------Å-------------------Å------------------------------------------´
| 8. Ornate | Scan | reported by SCAN as originating from the |
| | | Philippines |
Ã-----------------------Å-------------------Å------------------------------------------´
| 9. Pempe.1811.B | F-Prot | patched Pempe.1811 |
Ã-----------------------Å-------------------Å------------------------------------------´
|10. PLM/JLS | | |
| | | |
| a. PLM/JLS 1 | ViRem 2.00a | |
| b. PLM/JLS 2 | ViRem 2.00a | |
Ã-----------------------Å-------------------Å------------------------------------------´
|11. Possessed | | I don't know if there is duplications |
| | | between those reported by F-Prot and |
| a. Possessed 1.00 | Vindicate 1.01 | Vindicate. If you have a copy of viruses |
| b. Possessed 1.01 | Vindicate 1.01 | reported by F-Prot, use Vindicate 1.01 |
| d. Possessed 1.04 | Vindicate 1.01 | on it. You will find a copy of Vindicate |
| e. Possessed 1.09 | Vindicate 1.01 | in HEX-FILES No. 2. |
| f. Possessed.2167.A | F-Prot 3.00 | |
| h. Possessed.2367.B | F-Prot 3.00 | |
Ã-----------------------Å-------------------Å------------------------------------------´
|12. Wisdom | Vir-X Plus 1.51 | reported as similar to Microbe and also |
| | | reported as detected by old SCAN (pre-200|
| | | versions) as Windmill |
Ã-----------------------Å-------------------Å------------------------------------------´
|13. Word.Macro | | |
| | | |
| a. WM/Cebu.A | Foreign AVs | seems to be written by person who wrote |
| b. WM/Cebu.B | Foreign AVs | WM/TwoLines (reported by SCAN as |
| | | originating from the Philippines) |
| c. WM/TheEraser | AVP | |
À-----------------------Á-------------------Á------------------------------------------Ù
-=<{[* HF4 *]}>=-
