Short description
Win32/Werle.C is a file infector. The virus infects the files by inserting its code at the beginning of the original program.
Installation
The virus may create the following files:
- %system%bernie.exe (317952 B)
- %system%bernie.map (317952 B)
- %system%bernie.tmp (317952 B)
- %system%%originalfilename%.exe
A string with variable content is used instead of %originalfilename%.
File infection
The virus searches local drives for files with the following file extensions:
The virus infects the files by inserting its code at the beginning of the original program.
The size of the inserted code is 317952 B.
Other information
The virus may delete the following files:
- *.doc
- *.jpg
- *.mp3
- *.pas
- *.zip
