Scott's Valley Virus
Virus Name: Scott's Valley
Aliases: 2131, Scott's, Slow-2131
V Status: Rare
Discovered: September, 1990
Symptoms: TSR; .COM and .EXE growth
Origin: Scott's Valley, California, United States
Eff Length: 2,131 Bytes
Type Code: PRsA - Parasitic Resident .COM & .EXE Infector
Detection Method: ViruScan, AVTK, F-Prot, NAV, Sweep, IBMAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
NAV/N, IBMAV/N
Removal Instructions: Delete infected files
General Comments:
The Scott's Valley virus was discovered in September, 1990 in
Scott's Valley, California. This virus is a memory resident
generic infector of .COM and .EXE files, and does not infect
COMMAND.COM.
The first time a program infected with the Scott's Valley virus is
executed, the virus installs itself memory resident as a low system
memory TSR of 2,384 bytes. Interrupt 21 is hooked by the virus.
After the virus is memory resident, any .COM or .EXE file executed
will be infected with the virus. .COM files will increase in
length by 2,131 bytes. .EXE files will increase in length between
2,131 and 2,140 bytes.
Infected programs will contain the following hex string in the
virus's code: 5E8BDE909081C63200B912082E.
It is unknown if this virus is malicious.