Terminator-2294 Virus

 Virus Name:  Terminator-2294 
 V Status:    Rare 
 Discovered:  December, 1992 
 Symptoms:    .COM & .EXE growth; decrease in total system & available free 
              memory; file allocation errors 
 Origin:      Unknown 
 Eff Length:  2,294 Bytes 
 Type Code:   PRhAK - Parasitic Resident .COM & .EXE Infector 
 Detection Method:  AVTK, ViruScan, Sweep, IBMAV, F-Prot, NAV, PCScan, 
                    NAVDX, VAlert, ChAV, 
                    NShld, Sweep/N, AVTK/N, LProt, NAV/N, NProt, IBMAV/N 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Terminator-2294 virus was submitted in December, 1992.  Its 
       origin or point of isolation is unknown.  Terminator-2294 is a 
       memory resident infector of .COM and .EXE programs, including 
       COMMAND.COM.  It employs some stealth techniques to avoid detection, 
       and does not replicate until the first infected program is 
       executed following a system boot occurring after December 31, 1992. 
       Once the system is booted after December 31, 1992, and a 
       Terminator-2294 infected program is executed, the Terminator-2294 
       virus will install itself memory resident at the top of system 
       memory but below the 640K DOS boundary, hooking interrupts 13, 21 
       and 24.  Total system and available free memory, as indicated by 
       the DOS CHKDSK program, will have decreased by 2,448 bytes.  Also at 
       this time, the Terminator-2294 virus will infect COMMAND.COM if it 
       was not previously infected. 
       Once the Terminator-2294 virus is memory resident, it will infect 
       .COM and .EXE programs when they are executed or opened.  Infected 
       programs will have a file length increase of 2,294 bytes with the 
       virus being located at the end of the file.  The file length 
       increase will not be visible when the virus is memory resident.  The 
       file's date and time in the DOS disk directory listing will not be 
       altered.  The following text is encrypted within the Terminator-2294 
       viral code: 
       Systems infected with the Terminator-2294 virus will notice file 
       allocation errors on all infected programs when the virus is 
       memory resident.  It is unknown what other effects the 
       Terminator-2294 may have. 

Show viruses from discovered during that infect .

Main Page