Kiev 483 Virus


 Virus Name:  Kiev 483 
 Aliases:     483, Kiev 
 V Status:    Rare 
 Discovered:  May, 1991 
 Symptoms:    .COM file growth 
 Origin:      USSR 
 Eff Length:  483 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, F-Prot, Sweep, AVTK, NAV, IBMAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Kiev 483 virus was submitted in May, 1991.  It is originally 
       from the USSR.  Kiev 483 is a non-resident, direct action infector 
       of .COM files, including COMMAND.COM. 
 
       When a program infected with Kiev 483 is executed, the virus will 
       search the current drive and directory, and infect the first 
       uninfected .COM program it locates.  Programs infected with Kiev 483 
       will increase in size by 483 bytes, the virus being located at the 
       end of infected files.  The infected program's date and time in the 
       DOS disk directory will not be altered. 
 
       Infected programs will contain three text strings: 
 
               "Kiev 1990" 
               "????????COM" 
               "*.COM" 
 
       Kiev 483 does not do anything besides replicate.

Show viruses from discovered during that infect .

Main Page