WW-658 Virus

 Virus Name:  WW-658 
 Aliases:     658 
 V Status:    New 
 Discovered:  August, 1993 
 Symptoms:    .COM & .EXE file growth 
 Origin:      Unknown 
 Eff Length:  658 Bytes 
 Type Code:   PRaAK - Parasitic Resident .COM & .EXE Infector 
 Detection Method:  ViruScan, NAV, NAVDX, AVTK, IBMAV, 
                    F-Prot, ChAV, 
                    NShld, NAV/N, AVTK/N, IBMAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The WW-658, or 658, virus was received in August, 1993.  Its origin 
       or point of isolation is unknown.  WW-658 is a memory resident 
       infector of .COM and .EXE programs, including COMMAND.COM. 
       When the first WW-658 infected program is executed, this virus will 
       install itself memory resident in a "hole" in low allocated system 
       memory, hooking interrupt 21.  Total system and available free 
       memory, as indicated by the DOS CHKDSK program, will not be altered. 
       Once memory resident, WW-658 will infect .COM and .EXE programs when 
       they are executed.  Infected programs will have a file length 
       increase of 658 bytes with the virus being located at the end of the 
       file.  The program's date and time in the DOS disk directory listing 
       will not be altered.  The following text string can be located at the 
       very end of all WW-658 infected programs: 

Show viruses from discovered during that infect .

Main Page