1835 Virus


 Virus Name:  1835 
 Aliases:    
 V Status:    Rare 
 Discovery:   June, 1992 
 Symptoms:    .EXE file growth 
 Origin:      Bulgaria 
 Eff Length:  1,835 Bytes 
 Type Code:   PNE - Parasitic Non-Resident .EXE Infector 
 Detection Method:  F-Prot, AVTK, ViruScan, Sweep, IBMAV, NAV, 
                    NAVDX, VAlert, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The 1835 virus was submitted in June, 1992.  It is a non-resident 
       infector of .EXE programs and is very roughly based on the Yankee 
       Doodle virus.  The submitted sample has been indicated to have 
       originated from Bulgaria. 
 
       When a program infected with the 1835 virus is executed, the 1835 
       virus will infect two .EXE programs located in the current drive's 
       current directory.  Infected programs will have a file length 
       increase of 1,835 bytes with the virus being located at the end of 
       the file.  The program's date and time in the DOS disk directory 
       listing will not be altered. 
 
       Two text strings occur within the virus which can be found in 
       infected files: 
 
               "*.exe *.*" 
               "wwZZZZ" 
 
       It is unknown if 1835 does anything besides replicate. 

Show viruses from discovered during that infect .

Main Page