Rosen Virus

Virus Name: Rosen Aliases: V Status: Rare Discovery: January, 1992 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 131 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: Sweep, ViruScan, F-Prot, AVTK, NAV, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, IBMAV/N, NAV/N Removal Instructions: Delete infected files General Comments: The Rosen virus was received in January, 1992. Its origin is unknown. Rosen is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Rosen virus is executed, this virus will infect all .COM programs located in the current directory. If COMMAND.COM is located in this directory, it will be infected. Programs infected with the Rosen virus will have a file size increase of 131 bytes with the virus being located at the beginning of the infected file. The file's date and time in the DOS disk directory will have been updated to the current system date and time when infection occurred. The following text string can be found within the viral code in all Rosen infected programs: "R*.COM" The Rosen virus is unable to recognize when programs have been previously infected by the virus, so it will later reinfect them, adding an additional 131 bytes with each reinfection. This virus does not do anything besides replicate.