Marky Virus

Virus Name: Marky Aliases: Marky.478 V Status: New Discovered: July, 1995 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 478 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, ViruScan, Sweep, NAV, NAVDX, IBMAV, ChAV, Sweep/N, NShld, NAV/N, IBMAV/N, AVTK/N, NProt, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Marky virus was received in July, 1995. Its origin or point of isolation is unknown. Marky is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Marky virus is executed, this virus will infect one .COM file located in the current drive current directory, and one .COM file located in the C: drive root directory. Infected .COM files will have a file length increase of 478 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are encrypted within the viral code: "C:\*.COM" "E:\COMMAND.COM" It is unknown what the Marky virus may do besides replicate.