F-Secure: Be Sure
Main
F-Secure Logo - Be Sure
Select local site


Privacy Policy
Legal Notices
Contact Us

F-Secure Virus Descriptions : W-13





NAME:W-13
ORIGIN:Poland or Russia
SIZE:534
TYPE:Non-resident COM-files
REPAIR:Yes

This is a Vienna-derived virus, virus, but it marks infected files by setting the "month" field to 13, instead of setting the "seconds" field to 62. W-13 has been reported to have originated in Russia as well as in Poland.

A 507 bytes variant with some bugs corrected is also known.

VARIANT:Protector
ALIAS:CSSR 528, IKV 528
This East-European virus is related to the W-13 viruses, but it has not been fully analyzed yet.

VARIANT:W-13 C
This is a minor modification of the 507 byte variant mentioned above. It will set the "month" field to 12, which makes it less obvious, as 12 is a legal value, but this also makes all files created in December immune to infection.

VARIANT:REQ!
A 494 byte variant from Poland - not yet analyzed.