Relzfu Virus
Virus Name: Relzfu
Aliases: 233, Fake VIRx
V Status: Rare
Discovery: September, 1991
Symptoms: .COM file growth; "Specified COMMAND search directory bad"
message on system boot
Origin: Finland
Eff Length: 233 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, Sweep, AVTK, F-Prot, IBMAV, VAlert,
NAV, NAVDX, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, IBMAV/N,
NAV/N
Removal Instructions: Delete infected files
General Comments:
The Relzfu, or 233, virus was discovered in Finland in September,
1991. Relzfu is a non-resident, direct action infector of .COM
files, including COMMAND.COM.
When a program infected with Relzfu is executed, the virus will
search the current directory for an uninfected .COM file to
infect. Once an uninfected program is located, the virus will
infect it, then the original program the user was attempted to
execute will run.
Programs infected with Relzfu will have a file length increase of
233 bytes with the virus being located at the end of the infected
file. There will be no change in the file's date and time in the
DOS disk directory. Two text strings can be found in infected
programs:
"ufzleR"
"*.com"
The first string has been used for the virus' name, with the string
reversed.
It is unknown if Relzfu does anything besides replicate.