Win95:Marburg

Marburg is polymorphic, direct action virus which, when run, searches for executable files to infect in the current directory, the Windows directory and the System directory. It infects PE files and also tries to delete files produced by some antivirus programs - integrity checkers (ANTI-VIR.DAT, CHKLIST.MS, AVP.CRC, IVB.NTZ). On random date it displays Windows 95 error icons (a white cross on a red circle) on the screen. As a flag of infected files, virus changes the file size to a number divisible by 101. It does not infect any files with V in the name and files "PAND*.*", "F-PR*.*", "SCAN*.*" to avoid infecting certain antivirus programs. Marburg was distributed on the cover CD on the July 1998 UK edition of the computer magazine PC Gamer.