Bunny Virus

 Virus Name:  Bunny 
 Aliases:     Bunny.497 
 V Status:    New 
 Discovery:   January, 1996 
 Symptoms:    .COM file growth; file date/time seconds = "62"; 
              decrease in available free memory 
 Origin:      Unknown 
 Eff Length:  497 Bytes 
 Type Code:   PRhC - Parasitic Resident .COM Infector 
 Detection Method: AVTK, NAV, NAVDX, ViruScan, IBMAV, F-Prot, PCScan, 
                   AVTK/N, NAV/N, NShld, IBMAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Bunny virus was received in January, 1996.  Its origin or point 
       of isolation is unknown.  Bunny is a memory resident infector of 
       .COM files, but not COMMAND.COM. 
       When the first Bunny infected program is executed, this virus will 
       install itself memory resident at the top of system memory but 
       below the 640K DOS boundary, not moving interrupt 12's return. 
       Available free memory, as indicated by the DOS CHKDSK program from 
       DOS 5.0, will have decreased by 544 bytes.  Interrupt 21 will be 
       hooked by the virus in memory. 
       Once the Bunny virus is memory resident, it will infect .COM files 
       when they are executed.  Infected files will have a file length 
       increase of 497 bytes with the virus being located at the end of 
       the file.  The program's date and time in the DOS disk directory 
       listing will not appear to be altered, though the seconds field will 
       have been set to "62".  The following text strings are visible within 
       the viral code: 
           "BUGS BUNNY" 

Show viruses from discovered during that infect .

Main Page