Gipsy-304 Virus

Virus Name: Gipsy-304 Aliases: 304 V Status: Rare Discovered: September, 1993 Symptoms: .COM file growth; file date/time month = "13" Origin: Unknown Eff Length: 304 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, AVTK, IBMAV, Sweep, NAV, NAVDX, VAlert, PCScan, ChAV, AVTK/N, LProt, NShld, Sweep/N, NProt, IBMAV/N, NAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Gipsy-304 virus was submitted in September, 1993. Its origin or point of isolation is unknown. Gipsy-304 is a non-resident, direct action infector of .COM programs, including COMMAND.COM. It is related to the W13 group of viruses. When a program infected with the Gipsy-304 virus is executed, this virus will infect one .COM program located in the current directory. Infected programs will have a file length increase of 304 bytes with the virus being located at the end of the file. The program's date in the DOS disk directory listing will have been altered so that the month field is now equal to "13", the virus's infection marker. The following text string is visible within the viral code in all infected files: "*.COM GIPSY" See: W13