Aurea Virus

 Virus Name:  Aurea 
 V Status:    Rare 
 Discovery:   August, 1993 
 Symptoms:    .COM file growth; message displayed; 
              random sectors on system hard disk overwritten 
 Origin:      Italy 
 Eff Length:  653 - 668 Bytes 
 Type Code:   PNC - Parasitic Non-Resident .COM  Infector 
 Detection Method:  F-Prot, ViruScan, Sweep, AVTK, IBMAV, 
                    NAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, NProt, Sweep/N, AVTK/N, IBMAV/N, Innoc, NAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Aurea virus was submitted in August, 1993, and is from Italy. 
       It is a non-resident, direct action infector of .COM programs, but 
       not COMMAND.COM. 
       When a program infected with the Aurea virus is executed, this virus 
       will infect one .COM program located in the current directory. 
       Infected programs will have a file length increase of 653 to 668 
       bytes with the virus being located at the end of the file.  The 
       program's date and time in the DOS disk directory listing will not 
       be altered.  The following text strings are encrypted within the 
       Aurea viral code: 
               "*.COM C:\DOS\*.COM COMMAND." 
               "I'm sorry, you lost something because of AUREA" 
       The Aurea virus will occassionally randomly overwrite sectors of the 
       system hard disk, and the following message may be displayed on the 
       system monitor: 
               "I'm sorry, you lost something because of AUREA" 

Show viruses from discovered during that infect .

Main Page