V-3n Virus

Virus Name: V-3n Aliases: V-30, V-31, V-32 V Status: Rare Discovered: April, 1992 Symptoms: .COM file growth; seconds in file time set to 00 Origin: Unknown Eff Length: 268 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, NAV, NAVDX, NShld, NAV/N Removal Instructions: Delete infected files General Comments: The V-3n family of viruses was received in April, 1992. This family's origin is unknown. The earliest of the viruses, V-30, is described in this entry, with the other family members being described below under variants. All of the viruses in this family are non-resident, direct action infectors of .COM programs, including COMMAND.COM. When a program infected with V-30 is executed, the V-30 virus will infect one previously uninfected .COM program located in the current directory. If COMMAND.COM resides in this directory, it may become infected. Programs infected with V-30 will have a file length increase of 268 bytes. The virus will be located at the end of the file. The seconds in the program's time in the DOS disk directory will be set to "00", which is the marker the virus uses to determine if the file is already infected. The following text string can be found in all V-30 infected programs: "*.com V - Version 3.0" V-30 doesn't do anything besides replicate. Other Members of the V-3n family of viruses are: V-31: Similar to the V-30 virus, this variant adds 266 bytes to the .COM programs it infects. The text string is now: "*.com V - Version 3.1". Origin: Unknown April, 1992. V-32: Similar to the V-30 virus, this variant adds 274 bytes to the .COM programs it infects. The text string is now: "*.com V - Version 3.2". Origin: Unknown April, 1992. See: V-1n