Virus Name: Serena
V Status: Rare
Discovered: November, 1992
Symptoms: .COM file growth; TSR
Eff Length: 792 Bytes
Type Code: PRsCK - Parasitic Resident .COM Infector
Detection Method: ViruScan, F-Prot, Sweep, IBMAV, AVTK, NAVDX, VAlert,
NAV, PCScan, ChAV,
NShld, Sweep/N, NAV/N, AVTK/N, NProt, IBMAV/N, Innoc
Removal Instructions: Delete infected files
The Serena virus was submitted in November, 1992. It is originally
from Italy. Serena is a memory resident infector of .COM programs,
When the first Serena infected program is executed, the Serena virus
will install itself memory resident as a low system memory TSR of
1,104 bytes. It hooks interrupt 21.
Once the Serena virus is memory resident, it will infect .COM
programs, including COMMAND.COM, when they are executed. Infected
programs will have a file length increase of 792 bytes with the
virus being located at the end of the file. The program's date and
time in the DOS disk directory listing will not be altered. No
text strings are visible within the viral code.
It is unknown what Serena does besides replicate.