Breaking Virus


 Virus Name:  Breaking 
 Aliases:     Breaking.1000 
 V Status:    Rare 
 Discovery:   October, 1994 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  1,000 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  F-Prot, ViruScan, AVTK, Sweep, NAV, IBMAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, AVTK/N, Sweep/N, NAV/N, IBMAV/N, NProt, 
                    Innoc 4.0+ 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Breaking virus was received in October, 1994.  Its origin or 
       point of isolation is unknown.  Breaking is a non-resident, direct 
       action infector of .COM files, including COMMAND.COM. 
 
       When a program infected with the Breaking virus is executed, this 
       virus will infect all of the .COM files located in the current 
       directory.  Infected .COM files will have a file length increase of 
       1,000 bytes with the virus being located at the end of the file.  The 
       program's date and time in the DOS disk directory listing will not be 
       altered.  The following text strings can be found within the viral 
       code in all Breaking infected programs: 
 
               "*.COM" 
               "1991" 
 
       It is unknown what Breaking does besides replicate. 
 
       Known variant(s) of Breaking are: 
       Breaking.1000.B: Received in July, 1995, Breaking.1000.B is a 
           1,000 byte minor variant of the Breaking virus described above. 
           Origin:  Unknown  July, 1995. 

Show viruses from discovered during that infect .

Main Page