1835 Virus
Virus Name: 1835
Aliases:
V Status: Rare
Discovery: June, 1992
Symptoms: .EXE file growth
Origin: Bulgaria
Eff Length: 1,835 Bytes
Type Code: PNE - Parasitic Non-Resident .EXE Infector
Detection Method: F-Prot, AVTK, ViruScan, Sweep, IBMAV, NAV,
NAVDX, VAlert, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
NAV/N, IBMAV/N
Removal Instructions: Delete infected files
General Comments:
The 1835 virus was submitted in June, 1992. It is a non-resident
infector of .EXE programs and is very roughly based on the Yankee
Doodle virus. The submitted sample has been indicated to have
originated from Bulgaria.
When a program infected with the 1835 virus is executed, the 1835
virus will infect two .EXE programs located in the current drive's
current directory. Infected programs will have a file length
increase of 1,835 bytes with the virus being located at the end of
the file. The program's date and time in the DOS disk directory
listing will not be altered.
Two text strings occur within the virus which can be found in
infected files:
"*.exe *.*"
"wwZZZZ"
It is unknown if 1835 does anything besides replicate.