Lippi-286 Virus
Virus Name: Lippi-286
Aliases: Lippi
V Status: Rare
Discovered: December, 1992
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 286 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: IBMAV, Sweep, AVTK, F-Prot, ViruScan,
NAV, NAVDX, VAlert, PCScan, ChAV,
Sweep/N, NShld, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N,
LProt
Removal Instructions: Delete infected files
General Comments:
The Lippi-286, or Lippi, virus was submitted in December, 1992. Its
origin or point of isolation is unknown. Lippi-286 is a non-
resident, direct action infector of .COM programs, including
COMMAND.COM.
When a program infected with the Lippi-286 virus is executed, the
Lippi-286 virus will infect one .COM program located in the current
directory. Infected programs will have a file length increase of
286 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not
be altered. The following text strings are visible within the
Lippi-286 viral code in all infected programs:
"*.COM"
"(C)RomlSoft(LipPI)1991"
Lippi-286 doesn't appear to do anything besides replicate.