Simple 1992 Virus

Virus Name: Simple 1992 Aliases: V Status: Rare Discovered: February, 1993 Symptoms: .COM file growth; file date/time changes Origin: USSR Eff Length: 424 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: Sweep, AVTK, F-Prot, ViruScan, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, Sweep/N, NShld, AVTK/N, NAV/N, NProt, IBMAV/N, Innoc, LProt Removal Instructions: Delete infected files General Comments: The Simple 1992 virus was submitted in February, 1993, and is originally from the USSR. Simple 1992 is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Simple 1992 virus is executed, the Simple 1992 virus will infect all of the .COM programs in the current directory, as well as the copy of COMMAND.COM located in the C: drive root directory. Infected programs will have a file length increase of 424 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings can be found within the Simple 1992 viral code in all infected programs: "SIMPLE 1992 (c)" "C:\V.0 *.COM" "C:\COMMAND.COM" Simple 1992 doesn't appear to do anything besides replicate.