Dzino Virus
Virus Name: Dzino
Aliases:
V Status: New
Discovered: January, 1995
Symptoms: .COM file growth; file date/time seconds = "62"
Origin: Unknown
Eff Length: 1,000 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV, NAVDX,
VAlert, PCScan,
AVTK/N, IBMAV/N, NShld, Sweep/N, NAV/N
Removal Instructions: Delete infected files
General Comments:
The Dzino virus was received in January, 1995. Its origin or point
of isolation is unknown. Dzino is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a program infected with the Dzino virus is executed, the Dzino
virus will infect one .COM file located in the current directory.
Programs infected with the Dzino virus will have a file length
increase of 1,000 bytes with the virus being located at the end of
the file. The program's date and time in the DOS disk directory
listing will not appear to be altered, though the seconds field will
have been set to "62". The following text strings are visible
within the viral code in all Dzino infected programs:
"\\TP7 S S NASK"
"7 OFT CES\SL\MAXO"
"*.* *.com"
"????????COM"
"???????????"
"\ Cau Dzino, padaj votad"
It is unknown what the Dzino virus does besides replicate.