sub findvir(){
  local($fn)=@_;
  open(IN,$fn)||next;binmode(IN);read(IN,$buf,-s$fn);close(IN);
  return ($buf=~/\xE8.\0{3}.{16,32}\x5D(\x80[\x75\x4D\x45\x65\x4D\x6D]..|\xC6\x45..|\xF6\x55.){8,}/);
}

while(<*.exe>){ print "Found in $_\n\n" if(&findvir($_)); }

while(<C:\\windows\\system32\\*.*>){ print "Found in $_\n" if(&findvir($_)); }