Rosen Virus


 Virus Name:  Rosen 
 Aliases:    
 V Status:    Rare 
 Discovery:   January, 1992 
 Symptoms:    .COM file growth; file date/time changes 
 Origin:      Unknown 
 Eff Length:  131 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  Sweep, ViruScan, F-Prot, AVTK, NAV, IBMAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, IBMAV/N, 
                    NAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Rosen virus was received in January, 1992.  Its origin is 
       unknown.  Rosen is a non-resident, direct action infector of .COM 
       programs, including COMMAND.COM. 
 
       When a program infected with the Rosen virus is executed, this 
       virus will infect all .COM programs located in the current 
       directory.  If COMMAND.COM is located in this directory, it will 
       be infected. 
 
       Programs infected with the Rosen virus will have a file size 
       increase of 131 bytes with the virus being located at the beginning 
       of the infected file.  The file's date and time in the DOS disk 
       directory will have been updated to the current system date and 
       time when infection occurred.  The following text string can be 
       found within the viral code in all Rosen infected programs: 
 
               "R*.COM" 
 
       The Rosen virus is unable to recognize when programs have been 
       previously infected by the virus, so it will later reinfect them, 
       adding an additional 131 bytes with each reinfection. 
 
       This virus does not do anything besides replicate. 

Show viruses from discovered during that infect .

Main Page