Evgenich Virus


 Virus Name:  Evgenich 
 Aliases:     Evgenich.161 
 V Status:    New 
 Discovered:  January, 1996 
 Symptoms:    .COM file growth; file date/time changes 
 Origin:      Unknown 
 Eff Length:  161 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method: ChAV, F-Prot, AVTK, IBMAV, ViruScan, PCScan, 
                   NAV, NAVDX, 
                   Innoc, AVTK/N, IBMAV/N, NShld, NAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Evgenich or Evgenich.161 virus was received in January, 1996. 
       Its origin or point of isolation is unknown.  Evgenich is a non- 
       resident, direct action infector of .COM files, including 
       COMMAND.COM. 
 
       When a program infected with the Evgenich virus is executed, this 
       virus will infect all of the .COM files in the current directory. 
       Infected .COM files will have a file length increase of 161 bytes 
       with the virus being located at the beginning of the file.  The 
       program's date and time in the DOS disk directory listing will have 
       been updated to the current system date and time when infection 
       occurred.  The following text strings are visible within the 
       viral code: 
 
           "Evgenich" 
           "*.com"

Show viruses from discovered during that infect .

Main Page