Win32/Simile (also known as Etap and MetaPHOR) is a metamorphic computer virus written in assembly language for Microsoft Windows.
Some of his previous viruses, such as Win95/Drill (which used the TUAREG polymorphic engine), have proved very challenging to detect.
Depending on the version of the virus, the case of each letter in the text is altered randomly.
After the rebuild, the virus searches for executable files in folders on all fixed and remote drives.
The infection process uses the structure of the host, as well as random factors, to control the placement of the virus body and the decryptor.