Mr Virus Virus
Virus Name: Mr Virus
Aliases:
V Status: Rare
Discovered: November, 1992
Symptoms: .COM file growth
Origin: Italy
Eff Length: 508 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, IBMAV,
NAV, NAVDX, VAlert, PCScan, ChAV,
NShld, Sweep/N, NProt, AVTK/N, NAV/N, IBMAV/N, Innoc,
LProt
Removal Instructions: Delete infected files
General Comments:
The Mr Virus virus was submitted from Italy in November, 1992. Mr
Virus is a non-resident, direct action infector of .COM programs,
including COMMAND.COM.
When a program infected with the Mr Virus virus is executed, this
virus will infect one .COM program located in the current directory.
If COMMAND.COM is located in this directory, it may become infected.
Programs infected with the Mr Virus virus will have a file length
increase of 508 bytes with the virus being located at the end of the
file. The program's date and time in the DOS disk directory listing
will not be altered. The following text strings can be found within
the viral code in all Mr Virus infected programs:
"Mr.Virus Ver. 1.10"
"????????COM"
"*.COM"
"???????????"
"COMMAND.COM"
It is unknown what Mr. Virus does besides replicate.