MSU Virus

Virus Name: MSU Aliases: MSU.271 V Status: New Discovered: July, 1995 Symptoms: .COM file growth; file date/time changes Origin: Philippines Eff Length: 271 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, VAlert, Sweep, NAV, NAVDX, IBMAV, ViruScan, ChAV, NAV/N, Sweep/N, IBMAV/N, AVTK/N, NShld, Innoc Removal Instructions: Delete infected files General Comments: The MSU virus was received in July, 1995. It is originally from The Philippines. MSU is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the MSU virus is executed, this virus will infect all of the .COM files located in the current directory. Infected .COM files will have a file length increase of 271 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text string is visible within the viral code in all infected files: "*.com MSU-Virus v1.0:The StartUp !" Known variant(s) of MSU are: MSU.297: Received in January, 1996, this is a 297 byte variant of the MSU virus described above. It adds 297 bytes to the .COM files it infects, with the virus being located at the beginning of the file. It does not infect COMMAND.COM. The file's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code: "(C)Long Tall Silver" "*.COM" "????????COM" Origin: The Philippines January, 1996.