1308 Virus

Virus Name: 1308 Aliases: Disk Spoiler V Status: Rare Discovery: January, 1992 Symptoms: .COM file growth; lost clusters found Origin: Unknown Eff Length: 1,308 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: Sweep, ViruScan, F-Prot, AVTK, NAV, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The 1308 virus was received in January, 1992. Its origin is unknown. The 1308 virus is a non-resident, direct action infector of .COM files, including COMMAND.COM. Each time a program infected with the 1308 virus is executed, the 1308 virus will search the current directory for the first uninfected .COM file. If an uninfected .COM file is located, it will infect it. Infected .COM files will have a file length increase of 1,308 bytes with the virus being located at the end of the infected program. The file's date and time in the DOS disk directory listing will not have been altered. Systems infected with the 1308 virus may notice increasing numbers of lost clusters being found on infected diskettes. These lost clusters may occur when the virus infects files, and typically occur in multiples of 10.