Infect.736 Virus
Virus Name: Infect.736
Aliases:
V Status: New
Discovered: February, 1995
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 736 Bytes
Type Code: PRsCK - Parasitic Resident .COM Infector
Detection Method: F-Prot, NAV, AVTK, Sweep, IBMAV, NAVDX, VAlert,
ViruScan, PCScan, ChAV,
Sweep/N, NProt, AVTK/N, IBMAV/N, Innoc, NAV/N, NShld,
LProt
Removal Instructions: Delete infected files
General Comments:
The Infect.736 virus was received in February, 1995. Its origin or
point of isolation is unknown. Infect.736 is a memory resident
infector of .COM files, including COMMAND.COM.
When the first Infect.736 infected program is executed, this virus
will install itself memory resident as a low system memory TSR of
1,056 bytes. Interrupts 1C, 21, and 2E will be hooked by the virus
in memory.
Once the Infect.736 virus is memory resident, it will infect .COM
files when they are executed. Infected files will have a file length
increase of 736 bytes with the virus being located at the beginning
of the file. The program's date and time in the DOS disk directory
listing will not be altered. The following text string is visible
within the viral code:
" COM"