302 Virus

 Virus Name:  302 
 V Status:    Rare 
 Discovery:   September, 1992 
 Symptoms:    .COM file growth; file date/time changes; TSR 
 Origin:      Unknown 
 Eff Length:  302 Bytes 
 Type Code:   PRsCK - Parasitic Resident .COM Infector 
 Detection Method:  F-Prot, ViruScan, Sweep, IBMAV, AVTK, NAVDX, 
                    NAV, VAlert, PCScan, ChAV, 
                    NShld, Sweep/N, Innoc, NProt, AVTK/N, LProt, IBMAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The 302 virus was received in September, 1992.  Its origin is 
       unknown.  The 302 virus is a memory resident infector of .COM 
       programs, including COMMAND.COM. 
       When the first 302 virus infected program is executed, the 302 
       virus will install itself memory resident as a low system memory 
       TSR of 864 bytes.  It hooks interrupt 21. 
       Once the 302 virus is memory resident, it will infect .COM programs, 
       including COMMAND.COM, when they are executed.  Infected programs 
       will have a file length increase of 302 bytes with the virus being 
       located at the end of the file.  The program's date and time in the 
       DOS disk directory listing will have been updated to the current 
       system date and time when infection occurred.  No text strings are 
       visible or contained in the viral code. 
       The 302 virus doesn't do anything besides replicate. 

Show viruses from discovered during that infect .

Main Page