title Virus Histograms user virgil ip 131.215.6.87 vol 1 lock ******** This is a collection of 1-byte histograms run over 22,406 viruses of 45 different types (2.2Gig). * /file VirusList.txt The truly curious can see exactly which viruses of each type were used. /b Breakdown of each Virus Type: /box( /pre( Size Samples Type 520K 123 8086_relocatable__Microsoft 24K 5 Bourne_Again_shell_script_text_executable 176K 38 Bourne_shell_script_text_executable 428K 44 compiled_Java_class_data__version_45_3 40K 9 DBase_3_data_file 56K 9 DOS_floppy_1440k 496K 15 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___dynamically_linked__uses_shared_libs___not_stripped 364M 17 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___dynamically_linked__uses_shared_libs___stripped 1.8M 51 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_0_0__dynamically_linked__uses_shared_libs___not_stripped 232K 12 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_0_0__dynamically_linked__uses_shared_libs___stripped 852K 27 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_2_5__dynamically_linked__uses_shared_libs___not_stripped 304K 3 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_2_5__dynamically_linked__uses_shared_libs___stripped 20K 4 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___statically_linked__corrupted_section_header_size 944K 12 ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___statically_linked__stripped 48K 3 FreeBSD_i386_compact_demand_paged_dynamically_linked_executable_not_stripped 520K 46 GLS_BINARY_LSB_FIRST 12K 2 Hitachi_SH_big_endian_COFF_executable__stripped 160K 31 Linux_Dev86_executable__headerless 3.7M 23 Microsoft_Access_Database 151M 2933 Microsoft_Office_Document 2.1M 99 Microsoft_Word_6_0_Document 1.4M 49 Microsoft_Word_document_data 216K 29 MPEG_ADTS__layer_I__v1__Monaural 4.0M 629 MS_DOS_batch_file_text 103M 6290 MS_DOS_executable__EXE 348K 14 MS_DOS_executable__EXE___diet_compressed 1.8M 77 MS_DOS_executable__EXE___LZEXE_v0_91_compressed 1.7G 9097 MS_DOS_executable__EXE___OS_2_or_MS_Windows 520K 6 MS_DOS_executable__EXE___OS_2_or_MS_Windows__Windows_self_extracting_ZIP 5.1M 131 MS_DOS_executable__EXE___PKLITE_compressed 1.9M 53 MS_Windows_PE_32_bit_Intel_80386_console_executable 13M 97 MS_Windows_PE_32_bit_Intel_80386_console_executable_not_relocatable 3.7M 73 MS_Windows_PE_32_bit_Intel_80386_GUI_DLL 177M 1159 MS_Windows_PE_32_bit_Intel_80386_GUI_executable 36M 401 MS_Windows_PE_32_bit_Intel_80386_GUI_executable_not_relocatable 3.1M 41 MS_Windows_PE_Intel_80386_console_executable_not_relocatable 520K 13 MS_Windows_PE_Intel_80386_GUI_executable_not_relocatable 392K 61 perl_script_text_executable 1.7M 13 RAR_archive_data__v14__os__Win32 1.1M 194 shell_archive_or_script_for_antique_kernel_text 4.5M 336 x86_boot_sector 40K 9 x86_boot_sector__code_offset_0x34 192K 36 x86_boot_sector__code_offset_0x3c 1.4M 14 Zip_archive_data__at_least_v1_0_to_extract 13M 78 Zip_archive_data__at_least_v2_0_to_extract /pre) /box) Histograms of 2-byte Bigrams of various virus types /gallery( * /imagefile 370_XA_sysV_pure_executable_not_stripped_.ls.gif * /imagefile ARC_archive_data_.ls.gif * /imagefile ASCII_C___program_text_.ls.gif * /imagefile ASCII_C_program_text_.ls.gif * /imagefile ASCII_English_text_.ls.gif * /imagefile ASCII_HTML_document_text_.ls.gif * /imagefile ASCII_Java_program_text_.ls.gif * /imagefile ASCII_assembler_program_text_.ls.gif * /imagefile ASCII_news_text_.ls.gif * /imagefile ASCII_text_.ls.gif * /imagefile Apple_II_image_with_white_background_.ls.gif * /imagefile Applesoft_BASIC_program_data_.ls.gif * /imagefile Assembler_source_.ls.gif * /imagefile BALANCE_NS32000__o_not_stripped_.ls.gif * /imagefile C_shell_script_text_executable_.ls.gif * /imagefile DBase_3_data_file__1866924033_records__.ls.gif * /imagefile DBase_3_data_file__2021036032_records__.ls.gif * /imagefile DBase_3_data_file__59392_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___1023536872_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___1358955449_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___1358955705_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___1885586180_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___453227213_records__.ls.gif * /imagefile DBase_3_data_file_with_memo_s___50904812_records__.ls.gif * /imagefile DOS_floppy_720k_.ls.gif * /imagefile Dyalog_APL_version_0__0_.ls.gif * /imagefile ELF_32_bit_LSB_executable_.ls.gif * /imagefile ELF_32_bit_LSB_relocatable_.ls.gif * /imagefile ELF_32_bit_LSB_shared_object_.ls.gif * /imagefile ELF_32_bit_MSB_executable_.ls.gif * /imagefile ELF_32_bit_invalid_byte_order__SYSV__.ls.gif * /imagefile GLF_BINARY_LSB_FIRST_.ls.gif * /imagefile HTML_document_text_.ls.gif * /imagefile Hitachi_SH_big_endian_COFF_object_.ls.gif * /imagefile IFF_data_.ls.gif * /imagefile ISO_8859_C___program_text_.ls.gif * /imagefile ISO_8859_C_program_text_.ls.gif * /imagefile ISO_8859_English_text_.ls.gif * /imagefile ISO_8859_HTML_document_text_.ls.gif * /imagefile ISO_8859_news_text_.ls.gif * /imagefile ISO_8859_text_.ls.gif * /imagefile LHarc_1_x_archive_data__lh1__.ls.gif * /imagefile Lisp_Scheme_program_text_.ls.gif * /imagefile Lotus_1_2_3_wk1_document_data_.ls.gif * /imagefile Lynx_cartridge_.ls.gif * /imagefile MED_Song_.ls.gif * /imagefile MIME_entity_text_.ls.gif * /imagefile MIT_scheme__library___.ls.gif * /imagefile MPEG_4_LOAS_.ls.gif * /imagefile MPEG_ADTS_.ls.gif * /imagefile MS_Windows_Help_Data_.ls.gif * /imagefile MS_Windows_HtmlHelp_Data_.ls.gif * /imagefile MS_Windows_PE_32_bit_Intel_80386_GUI_DLL_not_relocatable_.ls.gif * /imagefile MS_Windows_PE_32_bit_Intel_80386_console_DLL_.ls.gif * /imagefile MS_Windows_PE_Intel_80386_GUI_executable_.ls.gif * /imagefile Macromedia_Flash_data_.ls.gif * /imagefile Microsoft_Cabinet_file_.ls.gif * /imagefile Microsoft_Outlook_binary_email_folder_.ls.gif * /imagefile Non_ISO_extended_ASCII_C___program_text_.ls.gif * /imagefile Non_ISO_extended_ASCII_English_text_.ls.gif * /imagefile Non_ISO_extended_ASCII_text_.ls.gif * /imagefile OpenType_font_data__.ls.gif * /imagefile PARIX_object_not_stripped_.ls.gif * /imagefile PC_bitmap_data_.ls.gif * /imagefile PHP_script_text_.ls.gif * /imagefile POSIX_tar_archive_.ls.gif * /imagefile PalmOS_application__Crack_1_1__.ls.gif * /imagefile PalmOS_application__Phage__.ls.gif * /imagefile PalmOS_application__Vapor__.ls.gif * /imagefile RFC_822_mail_text_.ls.gif * /imagefile RISC_OS_archive__spark_format__.ls.gif * /imagefile SYMMETRY_i386__o_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_1253374725_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_1914817794_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_429296959_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_637535262_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_637537310_.ls.gif * /imagefile SYMMETRY_i386__o_not_stripped_version_75794734_.ls.gif * /imagefile SYMMETRY_i386_executable__0___0__version_207_.ls.gif * /imagefile SYMMETRY_i386_executable__0___0__version_62149376_.ls.gif * /imagefile SYMMETRY_i386_executable__0___0__version_841888374_.ls.gif * /imagefile SYMMETRY_i386_executable__invalid___0__not_stripped_.ls.gif * /imagefile SYMMETRY_i386_executable__invalid___0__not_stripped_version_236848104_.ls.gif * /imagefile SYMMETRY_i386_executable__invalid___0__version_100901125_.ls.gif * /imagefile SYMMETRY_i386_executable__invalid___0__version_771756037_.ls.gif * /imagefile SYMMETRY_i386_standalone_executable_.ls.gif * /imagefile Sendmail_frozen_configuration____version_6_006_001___.ls.gif * /imagefile Sendmail_frozen_configuration____version__015_t7V_006_016_007_3__216__215___.ls.gif * /imagefile Spanish_Microsoft_Word_6_document_data_.ls.gif * /imagefile SysEx_File___.ls.gif * /imagefile Targa_image_data___RGB_.ls.gif * /imagefile TeX_font_metric_data_.ls.gif * /imagefile TeX_font_metric_data___002__.ls.gif * /imagefile UTF_8_Unicode_English_text_.ls.gif * /imagefile UTF_8_Unicode_text_.ls.gif * /imagefile Visio__TM__Drawing_.ls.gif * /imagefile Win32_.ls.gif * /imagefile XML_document_text_.ls.gif * /imagefile Zip_archive_data_.ls.gif * /imagefile ABCDEFGHIJK__.ls.gif * /imagefile BACKUP__003__.ls.gif * /imagefile BOOT437______.ls.gif * /imagefile CLEAN_BOOT___.ls.gif * /imagefile DARKANGEL____.ls.gif * /imagefile ECONOMIC_____.ls.gif * /imagefile ETHER________.ls.gif * /imagefile GWAR_VIRUS___.ls.gif * /imagefile HACKER_32____.ls.gif * /imagefile HIPPIE_______.ls.gif * /imagefile MANDRAGORA___.ls.gif * /imagefile MCAFEEEDISK__.ls.gif * /imagefile MKC__________.ls.gif * /imagefile MS_DOS_6_____.ls.gif * /imagefile NICHOLII_____.ls.gif * /imagefile NO_AMEN______.ls.gif * /imagefile NO_N__020E______.ls.gif * /imagefile N____________.ls.gif * /imagefile PCDOS_7______.ls.gif * /imagefile PETER________.ls.gif * /imagefile PKBACK__001__.ls.gif * /imagefile PKBACK__016__.ls.gif * /imagefile POXDOKTOR____.ls.gif * /imagefile QC___________.ls.gif * /imagefile SCAN_V112____.ls.gif * /imagefile SCHIESSBUDE__.ls.gif * /imagefile SWAP_VIRUS___.ls.gif * /imagefile VIRMACHINE___.ls.gif * /imagefile VIVI_________.ls.gif * /imagefile ZARAZA_______.ls.gif * /imagefile 216__216____.ls.gif * /imagefile BV__.ls.gif * /imagefile ls.gif * /imagefile a__usr_bin_python_script_text_executable_.ls.gif * /imagefile a_wish_015_script_text_executable_.ls.gif * /imagefile big_endian_ispell_hash_file_____.ls.gif * /imagefile binary_Computer_Graphics_Metafile_.ls.gif * /imagefile bzip2_compressed_data_.ls.gif * /imagefile data_.ls.gif * /imagefile exported_SGML_document_text_.ls.gif * /imagefile gzip_compressed_data_.ls.gif * /imagefile ms_Windows_shortcut_.ls.gif * /imagefile news_or_mail_text_.ls.gif * /imagefile news_text_.ls.gif * /imagefile packed_data_.ls.gif * /imagefile perl_script_text_.ls.gif * /imagefile raw_G3_data_.ls.gif * /imagefile smtp_mail_text_.ls.gif * /imagefile troff_or_preprocessor_input_text_.ls.gif * /imagefile unicos__cray__executable_.ls.gif * /imagefile x86_boot_sector_.ls.gif /gallery) /gallery( * /imagefile 8086_relocatable__Microsoft.png * /imagefile Bourne_Again_shell_script_text_executable.png * /imagefile Bourne_shell_script_text_executable.png * /imagefile DBase_3_data_file.png * /imagefile DOS_floppy_1440k.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___dynamically_linked__uses_shared_libs___not_stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___dynamically_linked__uses_shared_libs___stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_0_0__dynamically_linked__uses_shared_libs___not_stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_0_0__dynamically_linked__uses_shared_libs___stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_2_5__dynamically_linked__uses_shared_libs___not_stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___for_GNU_Linux_2_2_5__dynamically_linked__uses_shared_libs___stripped.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___statically_linked__corrupted_section_header_size.png * /imagefile ELF_32_bit_LSB_executable__Intel_80386__version_1__SYSV___statically_linked__stripped.png * /imagefile FreeBSD_i386_compact_demand_paged_dynamically_linked_executable_not_stripped.png * /imagefile GLS_BINARY_LSB_FIRST.png * /imagefile Hitachi_SH_big_endian_COFF_executable__stripped.png * /imagefile Linux_Dev86_executable__headerless.png * /imagefile MPEG_ADTS__layer_I__v1__Monaural.png * /imagefile MS_DOS_batch_file_text.png * /imagefile MS_DOS_executable__EXE_.png * /imagefile MS_DOS_executable__EXE___LZEXE_v0_91_compressed.png * /imagefile MS_DOS_executable__EXE___OS_2_or_MS_Windows.png * /imagefile MS_DOS_executable__EXE___OS_2_or_MS_Windows__Windows_self_extracting_ZIP.png * /imagefile MS_DOS_executable__EXE___PKLITE_compressed.png * /imagefile MS_DOS_executable__EXE___diet_compressed.png * /imagefile MS_Windows_PE_32_bit_Intel_80386_GUI_DLL.png * /imagefile MS_Windows_PE_32_bit_Intel_80386_GUI_executable.png * /imagefile MS_Windows_PE_32_bit_Intel_80386_GUI_executable_not_relocatable.png * /imagefile MS_Windows_PE_32_bit_Intel_80386_console_executable.png * /imagefile MS_Windows_PE_32_bit_Intel_80386_console_executable_not_relocatable.png * /imagefile MS_Windows_PE_Intel_80386_GUI_executable_not_relocatable.png * /imagefile MS_Windows_PE_Intel_80386_console_executable_not_relocatable.png * /imagefile Microsoft_Access_Database.png * /imagefile Microsoft_Office_Document.png * /imagefile Microsoft_Word_6_0_Document.png * /imagefile Microsoft_Word_document_data.png * /imagefile RAR_archive_data__v14__os__Win32.png * /imagefile Zip_archive_data__at_least_v1_0_to_extract.png * /imagefile Zip_archive_data__at_least_v2_0_to_extract.png * /imagefile compiled_Java_class_data__version_45_3.png * /imagefile perl_script_text_executable.png * /imagefile shell_archive_or_script_for_antique_kernel_text.png * /imagefile x86_boot_sector.png * /imagefile x86_boot_sector__code_offset_0x34.png * /imagefile x86_boot_sector__code_offset_0x3c.png /gallery)