Microsoft KB Archive/43790

From BetaArchive Wiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
Knowledge Base

nVIR Resources Result from Infection by nVIR Virus

Article ID: 43790

Article Last Modified on 11/21/2006

This article was previously published under Q43790


The nVIR resource (viewable in ResEdit) is created by the nVIR virus. It is believed that this virus works by first attacking the System. Once the System is infected, it proceeds to attack applications. Every time an application [such as QuickBASIC (b) or (d)] is launched, nVIR will insert a new resource of type nVIR with a new ID number into the application's resource fork. The symptoms are not apparent until the application has been launched many times and many nVIR resources have been added. As the virus multiplies, the application begins to run poorly and eventually produces system bombs.

Vaccine(TM) Version 1.01 does not detect or remove nVIR.

Interferon(TM) Version 3.1 does detect and remove nVIR.

Additional query words: MQuickB

Keywords: KB43790