Wlasnie Virus

Virus Name: Wlasnie Aliases: Wlasnie.138 V Status: New Discovered: February, 1995 Symptoms: .COM file growth Origin: Unknown Eff Length: 138 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, Sweep, AVTK, IBMAV, NAVDX, ChAV, ViruScan, VAlert, NAV, NProt, IBMAV/N, AVTK/N, Sweep/N, NShld, NAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Wlasnie virus was received in February, 1995. Its origin or point of isolation is unknown. Wlasnie is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Wlasnie virus is executed, this virus will infect one .COM file located in the current directory. Infected programs will have a file length increase of 138 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not appear to altered, though with some directory/disk utilities, the decade in the file date may be set to "2" or "3". The following text string is visible within the viral code: "*.COM" Known variant(s) of Wlasnie are: Wlasnie.174: Received in February, 1995, Wlasnie.174 is a 174 byte version of the Wlasnie virus described above. It adds 174 bytes to the .COM files it infects. The following text strings are visible within the viral code in all infected files: "(\RŠM" "\*.COM" Origin: Unknown February, 1995.