Traven Virus
Virus Name: Traven
Aliases: Traven.515
V Status: New
Discovered: July, 1995
Symptoms: .COM file growth; file date/time changes
Origin: Unknown
Eff Length: 515 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: VAlert, AVTK, NAV, NAVDX, IBMAV, ViruScan, F-Prot,
ChAV,
AVTK/N, NAV/N, IBMAV/N, NShld, Innoc
Removal Instructions: Delete infected files
General Comments:
The Traven virus was received in July, 1995. Its origin or point of
isolation is unknown. Traven is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a Traven infected program is executed, this virus will infect
one .COM file located in the current directory. Infected files will
have a file length increase of 515 bytes with the virus being
located at the end of the file. The program's date and time in the
DOS disk directory listing will have been updated to the current
system date and time when infection occurred. The following text
strings are visible within the viral code:
"Truż"
"VER 2.1"
"*.com"
"by Traven(Traveller)"