Itavir Virus

 Virus Name:  Itavir 
 Aliases:     3880 
 V Status:    Endangered 
 Discovered:  March, 1990 
 Symptoms:    .EXE growth; COMMAND.COM file; boot sector corruption 
 Origin:      Italy 
 Eff Length:  3,880 Bytes 
 Type Code:   PNE - Parasitic Non-Resident .EXE Infector 
 Detection Method:  ViruScan, AVTK, F-Prot, NAV, Sweep, 
                    IBMAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Itavir virus was isolated in March 1990 by a group of students 
       at the Milan Politechnic in Milan, Italy.  The Itavir virus is a 
       non-resident generic .EXE Infector.  Infected files will increase in 
       length by 3,880 bytes.  Infected systems, besides having files which 
       have increased in length, will usually have a file with the name 
       COMMAND.COM somewhere on the disk.  The first character of this file 
       name is an unprintable character.  The COMMAND.COM file contains the 
       pure virus code and is used for appending to files as they are 
       The Itavir virus activates at some time period after the system has 
       been running for more than 24 hours.  When it activates, the boot 
       sector is corrupted, rendering the system unbootable.  The virus 
       also displays a message in Italian and writes ANSI values from 0 
       through 255 to all available I/O ports, thus confusing any attached 
       peripheral devices.  Some monitors may show a flickering effect when 
       this occurs, while some VGA monitors may actually "hiss". 

Show viruses from discovered during that infect .

Main Page