Weizen Virus

Virus Name: Weizen Aliases: Weizen.467 V Status: New Discovered: January, 1996 Symptoms: .COM file growth Origin: Germany Eff Length: 467 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ChAV, F-Prot, AVTK, IBMAV, ViruScan, NAV, NAVDX, Innoc, AVTK/N, IBMAV/N, NShld, NAV/N Removal Instructions: Delete infected files General Comments: The Weizen or Weizen.467 virus was received in January, 1996. It appears to be from Germany. Weizen is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Weizen virus is executed, this virus will infect all of the .COM files located in the current directory. Infected programs will have a file length increase of 467 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the viral code: "WeizenBier (Kristall, Hefe, Hell oder Dunkel?) rulez! Made in Germany - v1.10 - 1994]" "*.com" "????????COM" Known variant(s) of Weizen are: Weizen.471: Also received in January, 1996, this is a 471 byte variant of the Weizen virus described above, and is functionally similar. Origin: Germany January, 1996.