Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


V-Sign


Aliases:


V-Sign
Cansu, Sigalit

Malware
Virus
W32

Summary

V-Sign is a typical boot sector virus, except that it uses slightly polymorphic encryption.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

V-Sign infects DOS boot sectors on diskettes and Master Boot Records on hard disks. It is only able to infect a hard disk when you boot a machine with an infected diskette in drive A:. At this time the virus infects the Master Boot Record, and after that it will go resident to high DOS memory during every boot-up from the hard disk. Once V-Sign gets resident to memory, it will infect practicly all non-writeprotected diskettes used in the machine.

V-Sign doesn't preserve the original boot sector when it infects a disk. The virus activates after infecting 64 diskettes. At this time it will display a large V-shaped letter and hang the machine.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.