702 Virus

Virus Name: 702 Aliases: V Status: Rare Discovery: July, 1992 Symptoms: .COM file growth; TSR Origin: Unknown Eff Length: 702 Bytes Type Code: PRsC - Parasitic Resident COM Infector Detection Method: ViruScan, Sweep, AVTK, F-Prot, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Sweep/N, AVTK/N, NProt, Innoc, IBMAV/N, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The 702 virus was submitted in July, 1992. This virus' origin or point of isolation is unknown. 702 is a memory resident infector of .COM programs, though it is somewhat picky about what it will infect. The first time a program infected with the 702 virus is executed, this virus will install itself memory resident as a low system memory TSR of 944 bytes. Interrupt 21 will be hooked by the virus in memory. Once the 702 virus is memory resident, it may infect .COM programs when they are executed. Infected programs will have a file length increase of 702 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. No text strings are visible within the 702 viral code in infected programs. It is unknown if 702 does anything besides replicate.