CCCP-510 Virus
Virus Name: CCCP-510
Aliases:
V Status: Rare
Discovery: February, 1993
Symptoms: .COM file growth; file date/time changes
Origin: USSR
Eff Length: 510 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, ViruScan, Sweep, AVTK, IBMAV, ChAV,
NAV, NAVDX, VAlert, PCScan,
NShld, Sweep/N, AVTK/N, NProt, NAV/N, IBMAV/N, Innoc,
LProt
Removal Instructions: Delete infected files
General Comments:
The CCCP-510 virus was submitted in February, 1993. It is originally
from the USSR. CCCP-510 is a non-resident, direct action infector of
.COM files, including COMMAND.COM.
When a program infected with the CCCP-510 virus is executed, the
CCCP-510 virus will infect one .COM file located in the current
directory. Infected programs will have a file length increase of
510 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will have
been updated to the current system date and time when infection
occurred. The following text strings can be found within the viral
code in all CCCP-510 infected programs:
"*** CCCP - 75! ***"
"DoomsDay..."
"*.com"
It is unknown what CCCP-510 does besides replicate.