Relzfu Virus


 Virus Name:  Relzfu 
 Aliases:     233, Fake VIRx 
 V Status:    Rare 
 Discovery:   September, 1991 
 Symptoms:    .COM file growth; "Specified COMMAND search directory bad" 
              message on system boot 
 Origin:      Finland 
 Eff Length:  233 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, Sweep, AVTK, F-Prot, IBMAV, VAlert, 
                    NAV, NAVDX, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, IBMAV/N, 
                    NAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Relzfu, or 233, virus was discovered in Finland in September, 
       1991.  Relzfu is a non-resident, direct action infector of .COM 
       files, including COMMAND.COM. 
 
       When a program infected with Relzfu is executed, the virus will 
       search the current directory for an uninfected .COM file to 
       infect.  Once an uninfected program is located, the virus will 
       infect it, then the original program the user was attempted to 
       execute will run. 
 
       Programs infected with Relzfu will have a file length increase of 
       233 bytes with the virus being located at the end of the infected 
       file.  There will be no change in the file's date and time in the 
       DOS disk directory.  Two text strings can be found in infected 
       programs: 
 
               "ufzleR" 
               "*.com" 
 
       The first string has been used for the virus' name, with the string 
       reversed. 
 
       It is unknown if Relzfu does anything besides replicate. 

Show viruses from discovered during that infect .

Main Page