Virus Name: Argentina-102
V Status: Viron
Discovery: July, 1992
Symptoms: .COM files overwritten & truncated to 102 bytes; file
date/time changed; program corruption
Eff Length: 102 Bytes
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, IBMAV, NAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, Sweep/N, AVTK/N, NProt, IBMAV/N, NAV/N
Removal Instructions: Delete infected files
The Argentina-102 virus was received from Argentina in July, 1992.
This virus is a non-resident, direct action .COM program
infector. It will also infect COMMAND.COM.
When a program infected by the Argentina-102 virus is executed, this
virus will delete the first .COM program in the current directory,
and then create a 102 byte file with the deleted program's name.
The replacement file will contain pure viral code. The program's
date and time in the DOS disk directory listing will have been
updated to the current system date and time when infection occurred.
Two text strings can be found within the viral code in all
Argentina-102 infected programs:
Argentina-102 doesn't do anything besides replicate, corrupting the
programs it infects.