Leningrad.543 Virus (25-07-1992)
Entry...............: Leningrad.543 Virus
Standard CARO name..: Leningrad.543
Alias(es)...........: Sov1, Sov-543, USSR-543, C-543, PANIKER
Virus Strain........: Leningrad virus strain
Virus detected when.: Mid 1990
              where.: Leningrad (St.Petersburg), Russia (ex USSR)
Classification......: Non-resindent program (COM) infector
Length of Virus.....: COM files increased by 543 bytes
--------------------- Preconditions ----------------------------------
Operating System(s).: MS-DOS
Version/Release.....: 2.xx upward
Computer model(s)...: IBM-PC, XT, AT and compatibles
--------------------- Attributes -------------------------------------
Wasy Identification.: Infected files contain strings "*.COM", "PATH=" 
                         and "That could be a crash, crash, crash !".
Type of infection...: Virus searches path and current directory. It 
                         infects using standard DOS INT 21h calls. 
Infection Trigger...: Any start of an infected file.
Storage media affected: Hard disk, any floppy disk
Interrupts hooked...: ---
Damage..............: Transient damage: Upon starting an infected pro-
                         gram on a Friday 13th, the virus will display
                         "That could be a crash, crash, crash !" 
                      Permanent damage: an infected files may grow
                         > 64KB, so it cannot be started afterwards.
Damage Trigger......: Any Friday 13th.
Particularities.....: ---
Similarities........: Leningrad.600 = Sov2 virus
--------------------- Agents ------------------------------------------
Countermeasures successful:McAfee Scan,Skulason F-PROT,Solomon FINDVIRU
Standard means......: Delete infected COM files, copy uninfected 
                         versions from original write protected disk.
--------------------- Acknowledgement ---------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Torsten Dargers
Documentation by....: Dr. Eldar Musaev, Leningrad, Russia
Date................: 07-July-1992
Information Source..: ----

.