Virus Name: Gipsy-304
V Status: Rare
Discovered: September, 1993
Symptoms: .COM file growth; file date/time month = "13"
Eff Length: 304 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, AVTK, IBMAV, Sweep,
NAV, NAVDX, VAlert, PCScan, ChAV,
AVTK/N, LProt, NShld, Sweep/N, NProt, IBMAV/N, NAV/N,
Removal Instructions: Delete infected files
The Gipsy-304 virus was submitted in September, 1993. Its origin or
point of isolation is unknown. Gipsy-304 is a non-resident, direct
action infector of .COM programs, including COMMAND.COM. It is
related to the W13 group of viruses.
When a program infected with the Gipsy-304 virus is executed, this
virus will infect one .COM program located in the current directory.
Infected programs will have a file length increase of 304 bytes with
the virus being located at the end of the file. The program's date
in the DOS disk directory listing will have been altered so that the
month field is now equal to "13", the virus's infection marker. The
following text string is visible within the viral code in all