Dismember Virus

 Virus Name:  Dismember 
 V Status:    Rare 
 Discovered:  October, 1992 
 Symptoms:    .COM file growth; file time seconds = "62" 
 Origin:      Sweden 
 Eff Length:  288 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, AVTK, F-Prot, Sweep, IBMAV, NAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, NProt, AVTK/N, NAV/N, 
                    IBMAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Dismember virus was submitted in October, 1992.  It is originally 
       from Sweden.  Dismember is a non-resident, direct action infector of 
       .COM programs, including COMMAND.COM. 
       When a program infected with the Dismember virus is executed, this 
       virus will infect all .COM files in the current directory which are 
       between 4,096 and 65,024 bytes in length before infection.  Infected 
       programs will have a file length increase of 288 bytes with the virus 
       being located at the end of the file.  The seconds field of the file 
       time in the DOS disk directory will have been set to "62", the 
       infection marker of the virus.  One text string is encrypted within 
       the virus: 
       Dismember doesn't appear to do anything besides replicate. 

Show viruses from discovered during that infect .

Main Page