Virus-101 Virus
Virus Name: Virus-101
Aliases:
V Status: Research
Discovered: January, 1990
Symptoms: TSR; BSC; .COM growth (floppy only)
Origin: District of Columbia, United States
Eff Length: 2,560 Bytes
Type Code: PRAFK - Parasitic Resident Infector
Detection Method: ViruScan, F-Prot, NAV, AVTK, Sweep, ChAV,
IBMAV, NAVDX, VAlert, PCScan,
NShld, LProt, Sweep/N, Innoc, AVTK/N, NAV/N, IBMAV/N
Removal Instructions: Delete infected files
General Comments:
The Virus-101 is the "big brother" of Virus-90, also written by
Patrick Toulme as an "educational tool" in January 1990. This virus
is memory resident, and employs an encryption scheme to avoid
detection on files. It infects COMMAND.COM, and all other
executable file types. Once it has infected all the files on a
diskette, it will infect the diskette's boot sector. It only
infects floppy diskettes in its current version.
The following description was submitted by Patrick Toulme for
inclusion in this listing in November 1990:
"Virus-101 is a sophisticated, continually encrypting, research
virus written by Patrick Toulme, author of Virus-90. Virus-101
infects both COM and EXE files and will evade most anti-virus
software and will continually encrypt itself to prevent
non-algorithmic search scans. This virus is not available to the
general public and is presently used by government agencies and
corporate security departments to test anti-virus software and
hardware devices."
See: Virus-90