Nipple Virus

Virus Name: Nipple Aliases: Nipple.208 V Status: New Discovered: January, 1995 Symptoms: .COM file growth Origin: Unknown Eff Length: 208 Bytes Type Code: PRfC - Parasitic Resident .COM Infector Detection Method: F-Prot, ViruScan, AVTK, IBMAV, Sweep, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Innoc, NProt, IBMAV/N, AVTK/N, Sweep/N, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Nipple virus was received in January, 1995. Its origin or point of isolation is unknown. Nipple is a memory resident infector of .COM files, but not COMMAND.COM. When the first Nipple infected program is executed, this virus will install itself memory resident in available free memory. Total system and available free memory, as indicated by the DOS CHKDSK program, will not be altered. Interrupt 21 will be hooked by the virus in memory. Once the Nipple virus is memory resident, it may infect .COM files when they are executed. It does not infect all .COM files. Programs infected with the Nipple virus will have a file length increase of 208 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text string can be found within the viral code in all Nipple infected programs: "[Nipple]"