Kiev 483 Virus
Virus Name: Kiev 483
Aliases: 483, Kiev
V Status: Rare
Discovered: May, 1991
Symptoms: .COM file growth
Eff Length: 483 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, Sweep, AVTK, NAV, IBMAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: Delete infected files
The Kiev 483 virus was submitted in May, 1991. It is originally
from the USSR. Kiev 483 is a non-resident, direct action infector
of .COM files, including COMMAND.COM.
When a program infected with Kiev 483 is executed, the virus will
search the current drive and directory, and infect the first
uninfected .COM program it locates. Programs infected with Kiev 483
will increase in size by 483 bytes, the virus being located at the
end of infected files. The infected program's date and time in the
DOS disk directory will not be altered.
Infected programs will contain three text strings:
Kiev 483 does not do anything besides replicate.