MPS 1.1 Virus


 Virus Name:  MPS 1.1 
 Aliases:     MPS-OPC 1.1 
 V Status:    Rare 
 Discovered:  November, 1991 
 Symptoms:    .COM file growth; file date/time change; program execution 
              errors 
 Origin:      Poland 
 Eff Length:  469 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, AVTK, Sweep, F-Prot, ChAV, 
                    IBMAV, NAV, NAVDX, VAlert, PCScan, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, 
                    IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The MPS 1.1 virus was submitted in November, 1991.  It is originally 
       from Poland.  MPS 1.1 is a non-resident, direct action infector of 
       .COM programs, including COMMAND.COM. 
 
       When a program infected with MPS 1.1 is executed, the virus will 
       infect all .COM programs located in the current directory.  If 
       COMMAND.COM is located in this directory, it will be infected as 
       well. 
 
       MPS 1.1 infected programs will have a file length increase of 
       469 bytes with the virus being located at the end of the file. 
       The program's date and time in the DOS disk directory will have 
       been updated to the system date and time when infection occurred. 
       The following text string can be found within the viral code 
       in MPS 1.1 infected programs: 
 
               "MPS-OPC 1991 v1.1 *.COM" 
 
       A symptom of an MPS 1.1 infection is that programs requiring 
       command line input may not function properly, returning unexpected 
       errors. 
 
       It is unknown if MPS 1.1 carries any destructive potential. 
 
       See:   MPS 3.1   MPS 3.2   MPS 4.01   MPS II-754

Show viruses from discovered during that infect .

Main Page