Vriest Virus

Virus Name: Vriest Aliases: V Status: Rare Discovered: April, 1991 Symptoms: .COM growth; TSR Origin: Europe Eff Length: 1,280 Bytes Type Code: PRsCK - Parasitic Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, Sweep, NAV, IBMAV, ChAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Vriest virus was received in April, 1991 and is believed to be from somewhere in Europe. Vriest is a memory-resident infector of .COM files including COMMAND.COM. The first time a program infected with Vriest is executed, Vriest will become memory-resident as a low system memory TSR of 1,584 bytes. Interrupts 20, 21, and 27 will be hooked by the virus. Unlike most virus, Vriest will not infect programs when they are executed or opened. It only infects .COM files when they are copied, at which time the target file will become infected. Programs infected with Vriest will increase in size by 1,280 bytes. The virus will be located at the beginning of the infected file. The file's date and time in the DOS disk directory will not have been altered. Vriest infected programs may become reinfected, adding an additional 1,280 bytes to the file length. Reinfection occurs when an infected program is again copied. Vriest does not appear to do anything besides replicate.