Sze Virus
Virus Name: Sze
Aliases: Sze.314
V Status: New
Discovered: January, 1995
Symptoms: .COM file growth; file date/time changes
Origin: Unknown
Eff Length: 314 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV, NAVDX,
VAlert, PCScan, ChAV,
AVTK/N, IBMAV/N, NShld, Sweep/N, NAV/N, NProt, Innoc,
LProt
Removal Instructions: Delete infected files
General Comments:
The Sze or Sze.314 virus was received in January, 1995. Its origin
or point of isolation is unknown. Sze is a non-resident, direct
action infector of .COM files, including COMMAND.COM.
When a program infected with the Sze virus is executed, this virus
will infect all of the .COM files located in the current directory.
Infected .COM files will have a file length increase of 314 bytes
with the virus being located at the end of the file. The program's
date and time in the DOS disk directory listing will have been
updated to the current system date and time when infection occurred.
The following text strings are visible within the viral code in all
Sze infected programs:
"*.co*"
"Sze"
The "Sze" text string will be located at the very end of all
infected files.
Known variant(s) of Sze are:
Sze.351: Also received in January, 1995, Sze.351 is a 351 byte
variant of the Sze virus. It adds 351 bytes to the .COM files
it infects, the virus being located at the end of the file.
It contains the same text strings as the Sze virus described
above.
Origin: Unknown January, 1995.