VirDem-1542 Virus

 Virus Name:  VirDem-1542 
 V Status:    Rare 
 Discovered:  1991 
 Symptoms:    .COM growth; system hangs; access to unexpected drives; 
              disk error messages 
 Origin:      Unknown 
 Eff Length:  1,542 - 3,028 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, F-Prot, Sweep, AVTK, IBMAV, ChAV, 
                    NAV, NAVDX, VAlert, PCScan, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The VirDem-1542 virus was submitted in August, 1991.  VirDem-1542 
       is a non-resident direct action infector of .COM files.  It does 
       not infect COMMAND.COM in the C: drive root directory.  VirDem-1542 
       is based on the VirDem virus. 
       When a program infected with VirDem-1542 is executed, the virus 
       will access the C: drive, searching the directory structure to 
       locate an uninfected .COM file, other than COMMAND.COM in the C: 
       drive root directory, to infected.  If an uninfected .COM file is 
       located, the virus will infect it.  Infected .COM files will increase 
       in size by 1,542 bytes, however if their original length was less 
       than 3,028 bytes, their infected length will become 3,028 bytes. 
       VirDem-1542 will also occassionally access the system B: drive to 
       look for a program to infect. 
       Systems infected with VirDem-1542 may experience system hangs when 
       executing infected programs. Another symptom is that the following 
       message may result if an infected copy of the DOS CHKDSK program 
       is executed: 
               "Disk error reading FAT 88 
                Probable non-DOS disk. 
                Continue (Y/N)?" 
       See:   Burger   VirDem   VirDem-792   Wonderful 

Show viruses from discovered during that infect .

Main Page