Experiments-416 Virus

 Virus Name:  Experiments-416 
 V Status:    Rare 
 Discovered:  March, 1993 
 Symptoms:    .COM file growth; file date/time changes 
 Origin:      USSR 
 Eff Length:  416 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  Sweep, AVTK, F-Prot, ViruScan, IBMAV, PCScan, 
                    NAV, NAVDX, VAlert, ChAV, 
                    Sweep/N, NShld, AVTK/N, NProt, IBMAV/N, Innoc, NAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Experiments-416 virus was submitted in March, 1993, and is from 
       the USSR.  Experiments-416 is a non-resident, direct action infector 
       of .COM programs, including COMMAND.COM. 
       When a program infected with the Experiments-416 virus is executed, 
       the Experiments-416 virus will infect all of the .COM files located 
       in the current directory.  Infected programs will have a file length 
       increase of 416 bytes with the virus being located at the end of the 
       file.  The program's date and time in the DOS disk directory listing 
       will have been updated to the current system date and time when 
       infection occurred.  The following text string can be found within 
       the viral code in all Experiments-416 infected programs: 
       It is unknown what Experiments-416 may do besides replicate. 
       See:  Experiments 

Show viruses from discovered during that infect .

Main Page