1392 Virus

 Virus Name:  1392 
 Aliases:     Amoeba Virus 
 V Status:    Rare 
 Discovery:   March, 1990 
 Symptoms:    TSR; .COM & .EXE growth; dates modified 
 Origin:      Indonesia 
 Eff Length:  1,392 Bytes 
 Type Code:   PRA - Parasitic Resident .COM & .EXE Infector 
 Detection Method:  ViruScan, F-Prot, NAV, AVTK, Sweep, 
                    IBMAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  F-Prot, NAV, or delete infected files 
 General Comments: 
       The 1392, or Amoeba, virus was first isolated in Indonesia in March 
       1990.  The 1392 virus is a memory resident virus that infects .COM 
       and .EXE files, including COMMAND.COM.  It copies the first 1,089 
       bytes of the host file to the end of the file, then overwrites the 
       first 1,089 bytes with viral code.  An additional 303 bytes of code 
       is then added to the end of the file.  As files are infected, their 
       creation/modification date is changed to the date the files were 
       This virus does not appear to cause any destructive damage. 
       The following message appears in the virus, which is where its alias 
       of Amoeba was derived from: 
              "SMA KHETAPUNK - Nouvel Band A.M.O.E.B.A" 

Show viruses from discovered during that infect .

Main Page