Cobra Virus


 Virus Name:  Cobra 
 Aliases:    
 V Status:    Rare 
 Discovery:   November, 1993 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  400 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  F-Prot, ViruScan, Sweep, AVTK, IBMAV, 
                    NAV, NAVDX, VAlert, ChAV, 
                    NShld, Sweep/N, NProt, AVTK/N, IBMAV/N, Innoc, NAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Cobra virus was received in November, 1993.  Its origin or point 
       of isolation is unknown.  Cobra is a non-resident, direct action 
       infector of .COM programs, including COMMAND.COM. 
 
       When a program infected with the Cobra virus is executed, this virus 
       will infect one .COM file located in the current directory.  Infected 
       programs will have a file length increase of 400 bytes with the virus 
       being located at the beginning of the file.  The program's date and 
       time in the DOS disk directory listing will not be altered.  The 
       following text strings can be found within the viral code in all 
       infected programs: 
 
               "Cobra" 
               "*.exe" 
               "*.com" 
 
       It is unknown if Cobra does anything besides replicate. 

Show viruses from discovered during that infect .

Main Page