VirDem-1542 Virus

Virus Name: VirDem-1542 Aliases: V Status: Rare Discovered: 1991 Symptoms: .COM growth; system hangs; access to unexpected drives; disk error messages Origin: Unknown Eff Length: 1,542 - 3,028 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, IBMAV, ChAV, NAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The VirDem-1542 virus was submitted in August, 1991. VirDem-1542 is a non-resident direct action infector of .COM files. It does not infect COMMAND.COM in the C: drive root directory. VirDem-1542 is based on the VirDem virus. When a program infected with VirDem-1542 is executed, the virus will access the C: drive, searching the directory structure to locate an uninfected .COM file, other than COMMAND.COM in the C: drive root directory, to infected. If an uninfected .COM file is located, the virus will infect it. Infected .COM files will increase in size by 1,542 bytes, however if their original length was less than 3,028 bytes, their infected length will become 3,028 bytes. VirDem-1542 will also occassionally access the system B: drive to look for a program to infect. Systems infected with VirDem-1542 may experience system hangs when executing infected programs. Another symptom is that the following message may result if an infected copy of the DOS CHKDSK program is executed: "Disk error reading FAT 88 Probable non-DOS disk. Continue (Y/N)?" See: Burger VirDem VirDem-792 Wonderful