V-160 Virus

Virus Name: V-160 Aliases: V Status: New Discovered: February, 1995 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 160 Bytes Type Code: PRaCK - Overwriting Resident .COM Infector Detection Method: F-Prot, ViruScan, AVTK, IBMAV, Sweep, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Innoc, NProt, IBMAV/N, AVTK/N, Sweep/N, NAV/N Removal Instructions: Delete infected files General Comments: The V-160 virus was received in February, 1995. Its origin or point of isolation is unknown. V-160 is a memory resident infector of .COM files, including COMMAND.COM. When the first V-160 infected file is executed, this virus will install itself in allocated system memory, directly hooking interrupts. As a result, no interrupts will be mapped to the virus in memory. Once the V-160 virus is memory resident, it will infect .COM files when they are executed. Infected .COM files will have a file length increase of 160 bytes with the virus being located at the beginning of the file. The file's date and time in the DOS disk directory listing will not be altered. No text strings are visible within the viral code. V-160 doesn't appear to do anything besides replicate.