Cpxk Virus

Virus Name: Cpxk Aliases: V Status: Rare Discovery: August, 1994 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 1,000 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV, NAVDX, VAlert, PCScan, ChAV, AVTK/N, Sweep/N, NProt, NShld, IBMAV/N, Innoc, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Cpxk virus was received in August, 1994. Its origin or point of isolation is unknown. Cpxk is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Cpxk virus is executed, this virus will infect one .COM file located in the current directory. Infected files will increase in size by 1,000 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code in all infected files: "CPXK" "*.COM" "????????COM" The "CPXK" string will also occur starting in the first byte of all infected files. Known variant(s) of Cpxk are: Cpxk.B: Received in July, 1995, this is a minor variant of the Cpxk virus described above. It also infects one .COM file located in the current directory when an infected program is executed, adding 1,000 bytes to the file's length. The file's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The text strings from the original virus also occur in this variant. Origin: Unknown July, 1995.