Nipple Virus

 Virus Name:  Nipple 
 Aliases:     Nipple.208 
 V Status:    New 
 Discovered:  January, 1995 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  208 Bytes 
 Type Code:   PRfC - Parasitic Resident .COM Infector 
 Detection Method:  F-Prot, ViruScan, AVTK, IBMAV, Sweep, 
                    NAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, Innoc, NProt, IBMAV/N, AVTK/N, Sweep/N, NAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Nipple virus was received in January, 1995.  Its origin or point 
       of isolation is unknown.  Nipple is a memory resident infector of 
       .COM files, but not COMMAND.COM. 
       When the first Nipple infected program is executed, this virus will 
       install itself memory resident in available free memory.  Total 
       system and available free memory, as indicated by the DOS CHKDSK 
       program, will not be altered.  Interrupt 21 will be hooked by the 
       virus in memory. 
       Once the Nipple virus is memory resident, it may infect .COM files 
       when they are executed.  It does not infect all .COM files.  Programs 
       infected with the Nipple virus will have a file length increase of 
       208 bytes with the virus being located at the end of the file.  The 
       program's date and time in the DOS disk directory listing will not 
       be altered.  The following text string can be found within the viral 
       code in all Nipple infected programs: 

Show viruses from discovered during that infect .

Main Page