Angarsk Virus

 Virus Name:  Angarsk 
 V Status:    Rare 
 Discovery:   December, 1992 
 Symptoms:    .COM file growth; file date/time change 
 Origin:      USSR 
 Eff Length:  238 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  AVTK, IBMAV, Sweep, F-Prot, ViruScan, 
                    NAV, NAVDX, VAlert, PCScan, ChAV, 
                    Sweep/N, NShld, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Angarsk virus was submitted in December, 1992.  It is originally 
       from the USSR.  Angarsk is a non-resident, direct action infector 
       of .COM programs, including COMMAND.COM. 
       When a program infected with the Angarsk virus is executed, the 
       Angarsk virus will infect all of the .COM programs located in the 
       current directory.  Infected programs will have a file length 
       increase of 238 bytes with the virus being located at the end of the 
       file.  The program's date and time in the DOS disk directory listing 
       will have been updated to the current system date and time when 
       infection occurred.  One text string can be found within the viral 
       code in Angarsk infected programs: 
       Angarsk doesn't appear to do anything besides replicate. 

Show viruses from discovered during that infect .

Main Page