Compusarcoma.1328 is a memory-resident virus. It infects the Command.com file, and files with the .com and .exe extensions. It will also infect any other file listed after SHELL= in the Config.sys file. Inside the virus is the following text:
Compusarcoma.1328 hooks INT 21h and appends itself to any .com and .exe files that are executed or read. As the virus goes resident, it infects Command.com. Compusarcoma.1328 also looks in the C:\Config.sys file for an alternate shell to infect.
If you believe you have been infected, please download the latest virus definitions via LiveUpdate or from the Symantec Security Response Web site.
Click here for instructions on using LiveUpdate to retrieve virus definitions.
Click here to manually download and install virus definitions from the Symantec Security Response Web site.
Additional information:
This virus only "knows" about DOS. The shell line in System.ini refers to your Windows shell; the same line in Config.sys refers only to the DOS shell (usually Command.com) and runs when you are in MS-DOS mode. Nothing Windows-specific is affected.
