Dismember Virus

Virus Name: Dismember Aliases: V Status: Rare Discovered: October, 1992 Symptoms: .COM file growth; file time seconds = "62" Origin: Sweden Eff Length: 288 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, Sweep, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, NProt, AVTK/N, NAV/N, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Dismember virus was submitted in October, 1992. It is originally from Sweden. Dismember is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Dismember virus is executed, this virus will infect all .COM files in the current directory which are between 4,096 and 65,024 bytes in length before infection. Infected programs will have a file length increase of 288 bytes with the virus being located at the end of the file. The seconds field of the file time in the DOS disk directory will have been set to "62", the infection marker of the virus. One text string is encrypted within the virus: "*.COM" Dismember doesn't appear to do anything besides replicate.