Threat Description

V-Sign

Details

Aliases: V-Sign, Cansu, Sigalit
Category: Malware
Type: Virus
Platform: W32

Summary



V-Sign is a typical boot sector virus, except that it uses slightly polymorphic encryption.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



V-Sign infects DOS boot sectors on diskettes and Master Boot Records on hard disks. It is only able to infect a hard disk when you boot a machine with an infected diskette in drive A:. At this time the virus infects the Master Boot Record, and after that it will go resident to high DOS memory during every boot-up from the hard disk. Once V-Sign gets resident to memory, it will infect practicly all non-writeprotected diskettes used in the machine.

V-Sign doesn't preserve the original boot sector when it infects a disk. The virus activates after infecting 64 diskettes. At this time it will display a large V-shaped letter and hang the machine.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More