Virus Name: Jason
V Status: New
Discovery: January, 1994
Symptoms: .COM file growth; characters from memory displayed before
expected program output
Eff Length: 609 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, AVTK, IBMAV, Sweep, NAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, AVTK/N, Sweep/N, IBMAV/N, NProt, NAV/N, Innoc,
Removal Instructions: Delete infected files
The Jason virus was submitted in January, 1994. Its origin or point
of isolation is unknown. Jason is a non-resident, direct action
infector of .COM programs, but not COMMAND.COM.
When a program infected with the Jason virus is executed, this virus
will infect one .COM file located in the current directory. Programs
infected with the Jason virus will have a file length increase of 609
bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not be
altered. The following text strings are encrypted within the Jason
"You've been infected by the JASON Virus. . ."
"This is only a test virus"
"So Dont Worry. . . .MAYBEEEEE"
Additionally, the text string "AD" can be found starting in the
fourth byte of all infected files.
Programs infected with the Jason virus may display characters from
system memory when they are executed, followed by the display of the
expected program output.