Win32/Werle [Threat Name] go to Threat

Win32/Werle.C [Threat Variant Name]

Category virus
Size 317952 B
Detection created Oct 27, 2009
Detection database version 4547
Aliases Trojan.Win32.Cosmu.alq (Kaspersky)
  Generic.Dropper.jo (McAfee)
  Trojan.Cinmeng (Symantec)
Short description

Win32/Werle.C is a file infector. The virus infects the files by inserting its code at the beginning of the original program.

Installation

The virus may create the following files:

  • %system%\­bernie.exe (317952 B)
  • %system%\­bernie.map (317952 B)
  • %system%\­bernie.tmp (317952 B)
  • %system%\­%originalfilename%.exe

A string with variable content is used instead of %originalfilename% .

File infection

The virus searches local drives for files with the following file extensions:

  • .exe

The virus infects the files by inserting its code at the beginning of the original program.


The size of the inserted code is 317952 B .


Other information

The virus may delete the following files:

  • *.doc
  • *.jpg
  • *.mp3
  • *.pas
  • *.zip

Please enable Javascript to ensure correct displaying of this content and refresh this page.