NR-481 Virus
Virus Name: NR-481
Aliases:
V Status: Rare
Discovered: March, 1993
Symptoms: .COM & .EXE growth
Origin: North America
Eff Length: 481 Bytes
Type Code: PNA - Parasitic Non-Resident .COM & .EXE Infector
Detection Method: ViruScan, F-Prot, Sweep, NAV, IBMAV, AVTK,
NAVDX, VAlert, PCScan,
NShld, Sweep/N, NAV/N, NProt, IBMAV/N, AVTK/N
Removal Instructions: Delete infected files
General Comments:
The NR-481 virus was submitted in March, 1993. It is from North
America (Canada or the United States). NR-481 is a non-resident,
direct action infector of .COM and .EXE programs, but not
COMMAND.COM.
When a program infected with the NR-481 virus is executed, the
NR-481 virus will infect all the .COM and .EXE programs located in
the current directory. Infected programs will have a file length
increase of 481 bytes with the virus being located at the end of
the file. The program's date and time in the DOS disk directory
listing will not be altered. One text string is visible within the
viral code in all NR-481 infected programs:
"*.EXE *.COM .."
NR-481 doesn't appear to do anything besides replicate.