Wlasnie Virus


 Virus Name:  Wlasnie 
 Aliases:     Wlasnie.138 
 V Status:    New 
 Discovered:  February, 1995 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  138 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  F-Prot, Sweep, AVTK, IBMAV, NAVDX, ChAV, 
                    ViruScan, VAlert, NAV, 
                    NProt, IBMAV/N, AVTK/N, Sweep/N, NShld, NAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Wlasnie virus was received in February, 1995.  Its origin or 
       point of isolation is unknown.  Wlasnie is a non-resident, direct 
       action infector of .COM files, including COMMAND.COM. 
 
       When a program infected with the Wlasnie virus is executed, this 
       virus will infect one .COM file located in the current directory. 
       Infected programs will have a file length increase of 138 bytes 
       with the virus being located at the end of the file.  The program's 
       date and time in the DOS disk directory listing will not appear to 
       altered, though with some directory/disk utilities, the decade in 
       the file date may be set to "2" or "3".  The following text string 
       is visible within the viral code: 
 
               "*.COM" 
 
       Known variant(s) of Wlasnie are: 
       Wlasnie.174: Received in February, 1995, Wlasnie.174 is a 174 
               byte version of the Wlasnie virus described above.  It adds 
               174 bytes to the .COM files it infects.  The following text 
               strings are visible within the viral code in all infected 
               files: 
               "(\RM" 
               "\*.COM" 
               Origin:  Unknown  February, 1995. 

Show viruses from discovered during that infect .

Main Page