Fission Virus


 Virus Name:  Fission 
 Aliases: 
 V Status:    New 
 Discovered:  January, 1995 
 Symptoms:    .COM, .EXE, .BAT file growth; 
              .BAT files fail to function; 
              decrease in total available free memory 
 Origin:      Unknown 
 Eff Length:  517  Bytes 
 Type Code:   PRhA - Parasitic Resident .COM, .EXE, .BAT Infector 
 Detection Method:  F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAVDX, VAlert, 
                    NAV, PCScan, ChAV, 
                    AVTK/N, IBMAV/N, NShld, Sweep/N, NProt, NAV/N, LProt, 
                    Innoc 4.0+ 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Fission virus was received in January, 1995.  Its origin or 
       point of isolation is unknown.  Fission is a memory resident 
       infector of .COM, .EXE, and .BAT files.  It does not infect 
       COMMAND.COM. 
 
       When the first Fission infected program is executed, this virus 
       will become memory resident at the top of system memory but below 
       the 640K DOS boundary, hooking interrupt 21.  Total available 
       memory, as indicated by the DOS 5.0 CHKDSK program, will have 
       decreased by approximately 800 bytes. 
 
       Once the Fission virus is memory resident, it will infect .COM, 
       .EXE, and .BAT files, but not COMMAND.COM, when they are executed. 
       Infected files will have a file length increase of 517 bytes with 
       the virus being located at the end of the file.  The file's date 
       and time in the DOS disk directory listing will not be altered. 
       The following text string is visible within the viral code in 
       all Fission infected files: 
 
               "[Binary Fission] v1.0 [MS/PS]" 
 
       .BAT files will fail to function properly once they have been 
       infected by the Fission virus. 

Show viruses from discovered during that infect .

Main Page