Parity Virus


 Virus Name:  Parity 
 Aliases: 
 V Status:    Rare 
 Discovered:  December, 1990 
 Symptoms:    .COM file growth; long .COM program loads; possibly 
              intermittent parity errors 
 Origin:      Bulgaria 
 Eff Length:  441 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM  Infector 
 Detection Method:  ViruScan, AVTK, F-Prot, NAV, Sweep, IBMAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Parity virus was received in December, 1990, and originated in 
       Bulgaria.  This virus is a non-memory resident infector of .COM 
       files, and will infect COMMAND.COM. 
 
       When a program infected with the Parity virus is executed, the 
       virus will infect all .COM files in the current directory.  If 
       COMMAND.COM is in the current directory, it will become infected. 
 
       Infected .COM programs will increase in length by 441 bytes, the 
       virus being located at the end of the infected program.  The 
       program's date and time in the disk directory will not be altered 
       by the virus. 
 
       The major symptom of a Parity virus infection is that it will take 
       significantly longer to load and execute infected .COM files.  The 
       increase in time is due to the virus searching the current drive 
       for .COM files to infect. 
 
       This virus may also display a message "PARITY CHECK 2" at times, 
       and halt the system. 

Show viruses from discovered during that infect .

Main Page