Virus Name: 302
V Status: Rare
Discovery: September, 1992
Symptoms: .COM file growth; file date/time changes; TSR
Eff Length: 302 Bytes
Type Code: PRsCK - Parasitic Resident .COM Infector
Detection Method: F-Prot, ViruScan, Sweep, IBMAV, AVTK, NAVDX,
NAV, VAlert, PCScan, ChAV,
NShld, Sweep/N, Innoc, NProt, AVTK/N, LProt, IBMAV/N,
Removal Instructions: Delete infected files
The 302 virus was received in September, 1992. Its origin is
unknown. The 302 virus is a memory resident infector of .COM
programs, including COMMAND.COM.
When the first 302 virus infected program is executed, the 302
virus will install itself memory resident as a low system memory
TSR of 864 bytes. It hooks interrupt 21.
Once the 302 virus is memory resident, it will infect .COM programs,
including COMMAND.COM, when they are executed. Infected programs
will have a file length increase of 302 bytes with the virus being
located at the end of the file. The program's date and time in the
DOS disk directory listing will have been updated to the current
system date and time when infection occurred. No text strings are
visible or contained in the viral code.
The 302 virus doesn't do anything besides replicate.