Gipsy-304 Virus

 Virus Name:  Gipsy-304 
 Aliases:     304 
 V Status:    Rare 
 Discovered:  September, 1993 
 Symptoms:    .COM file growth; file date/time month = "13" 
 Origin:      Unknown 
 Eff Length:  304 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, F-Prot, AVTK, IBMAV, Sweep, 
                    NAV, NAVDX, VAlert, PCScan, ChAV, 
                    AVTK/N, LProt, NShld, Sweep/N, NProt, IBMAV/N, NAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Gipsy-304 virus was submitted in September, 1993.  Its origin or 
       point of isolation is unknown.  Gipsy-304 is a non-resident, direct 
       action infector of .COM programs, including COMMAND.COM.  It is 
       related to the  W13  group of viruses. 
       When a program infected with the Gipsy-304 virus is executed, this 
       virus will infect one .COM program located in the current directory. 
       Infected programs will have a file length increase of 304 bytes with 
       the virus being located at the end of the file.  The program's date 
       in the DOS disk directory listing will have been altered so that the 
       month field is now equal to "13", the virus's infection marker.  The 
       following text string is visible within the viral code in all 
       infected files: 
               "*.COM GIPSY" 
       See:  W13 

Show viruses from discovered during that infect .

Main Page