Virus Name: Dismember
V Status: Rare
Discovered: October, 1992
Symptoms: .COM file growth; file time seconds = "62"
Eff Length: 288 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, IBMAV, NAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, NProt, AVTK/N, NAV/N,
Removal Instructions: Delete infected files
The Dismember virus was submitted in October, 1992. It is originally
from Sweden. Dismember is a non-resident, direct action infector of
.COM programs, including COMMAND.COM.
When a program infected with the Dismember virus is executed, this
virus will infect all .COM files in the current directory which are
between 4,096 and 65,024 bytes in length before infection. Infected
programs will have a file length increase of 288 bytes with the virus
being located at the end of the file. The seconds field of the file
time in the DOS disk directory will have been set to "62", the
infection marker of the virus. One text string is encrypted within
Dismember doesn't appear to do anything besides replicate.