Argentina-102 Virus

Virus Name: Argentina-102 Aliases: V Status: Viron Discovery: July, 1992 Symptoms: .COM files overwritten & truncated to 102 bytes; file date/time changed; program corruption Origin: Argentina Eff Length: 102 Bytes Type Code: ONCK - Overwriting Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, Sweep, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Sweep/N, AVTK/N, NProt, IBMAV/N, NAV/N Removal Instructions: Delete infected files General Comments: The Argentina-102 virus was received from Argentina in July, 1992. This virus is a non-resident, direct action .COM program infector. It will also infect COMMAND.COM. When a program infected by the Argentina-102 virus is executed, this virus will delete the first .COM program in the current directory, and then create a 102 byte file with the deleted program's name. The replacement file will contain pure viral code. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. Two text strings can be found within the viral code in all Argentina-102 infected programs: "????????COM" "*.com" Argentina-102 doesn't do anything besides replicate, corrupting the programs it infects.