Shizol Virus


 Virus Name:  Shizol 
 Aliases:    
 V Status:    New 
 Discovered:  January, 1995 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  500 Bytes 
 Type Code:   PRaCK - Parasitic Resident .COM Infector 
 Detection Method:  F-Prot, AVTK, IBMAV, Sweep, ViruScan, NAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    AVTK/N, IBMAV/N, Sweep/N, NShld, NAV/N, Innoc 4.0+ 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Shizol virus was received in January, 1995.  Its origin or point 
       of isolation is unknown.  Shizol is a memory resident infector of 
       .COM files, including COMMAND.COM.  It is unknown what it may do 
       besides replicate. 
 
       When the first Shizol infected program is executed, this virus will 
       install itself memory resident in allocated system memory at 0020. 
       Interrupt 21 will be hooked by the virus in memory.  Total system 
       and available free memory, as indicated by the DOS CHKDSK program, 
       will not be altered. 
 
       Once the Shizol virus is memory resident, it will infect .COM files 
       when they are executed.  Infected programs will have a file length 
       increase of 500 bytes with the virus being located at the end of the 
       file.  The program's date and time in the DOS disk directory listing 
       will not be altered.  The following text string can be found within 
       the viral code in all infected programs: 
 
               "Shizol0.0"

Show viruses from discovered during that infect .

Main Page