Serena Virus

Virus Name: Serena Aliases: V Status: Rare Discovered: November, 1992 Symptoms: .COM file growth; TSR Origin: Italy Eff Length: 792 Bytes Type Code: PRsCK - Parasitic Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, IBMAV, AVTK, NAVDX, VAlert, NAV, PCScan, ChAV, NShld, Sweep/N, NAV/N, AVTK/N, NProt, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Serena virus was submitted in November, 1992. It is originally from Italy. Serena is a memory resident infector of .COM programs, including COMMAND.COM. When the first Serena infected program is executed, the Serena virus will install itself memory resident as a low system memory TSR of 1,104 bytes. It hooks interrupt 21. Once the Serena virus is memory resident, it will infect .COM programs, including COMMAND.COM, when they are executed. Infected programs will have a file length increase of 792 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. No text strings are visible within the viral code. It is unknown what Serena does besides replicate.