V-Sign
aka Cansu / Victory

- discovered
- 1992
- origin
- Turkey
- reported by
- various
- author
- unknown
- family
- V-Sign
- size
- 512 bytes
- platform
- DOS boot sector
- vector
- Floppy boot sectors
- payload
- boot sector, visual
- trigger
- every 64 boots
Payload
Displays a large ASCII V across the screen, the victory sign for which the virus is named, then continues booting normally.
The V-Sign virus arrived in 1992 from Turkey, and it did something that most boot sector viruses did not: it made a gesture.
At 512 bytes, V-Sign was minimal. It infected floppy boot sectors in the early-DOS era, spreading the way floppies spread: hand to hand, installation disk to installation disk, the physical sneakernet of machines before the internet made viruses a matter of bandwidth. The virus was also known as Cansu or Victory, names that orbited around the same symbolic act. Every 64 boots, the trigger would fire.
And then the screen would fill with a large ASCII V.
The V-sign. The victory sign. The peace sign. The gesture that means resistance, triumph, refusal. Not destruction. Not encryption. Not file deletion. Just a letter, formed in ASCII, displayed in place. A message that said: I was here.
There's a lineage here, and it runs through the museum. The Stoned virus, which years earlier had displayed "Your PC is now stoned. Please don't drink and drive." Code as speech act. Virus as pamphlet. The idea that a virus could be not just a weapon but a statement, a way of broadcasting intent to systems and the people who owned them. V-Sign belonged to that tradition: the virus as graffiti, the malware as political art.
The aesthetics matter. The ASCII art rated 4 out of 5 for aesthetic value, the highest rating in the design taxonomy. Someone who understood the medium designed this payload. The V isn't crude or random. It's calculated. It's meant to look good on a CRT screen in 1992, meant to be memorable. The virus author didn't want to hide. They wanted to be seen.
What you notice about V-Sign is what it doesn't do. It doesn't erase. It doesn't encrypt. It doesn't corrupt. It boots normally after the payload. The virus is almost courteous in its intrusion. It's a guest at the boot sequence, not a parasite. It leaves the system intact, the data safe, the user free to continue their day. But changed, ever so slightly. Aware that something from outside had been inside the machine.
The context matters too. Turkey in 1992 was a place with its own political texture, its own reasons for gestures of victory and resistance. A virus isn't created in a vacuum. It carries the moment that birthed it. V-Sign was born into a world still shaped by Cold War endings, by the possibility that small acts of disruption could mean something.
It's easy to dismiss it as a novelty, a prank, not a "real" virus because the payload was pure gesture. But that misses the point. V-Sign proved that code could be expressive, that infecting a system could be an act of communication rather than destruction. The virus reached systems across continents. Users booted their machines and saw a giant V. That message traveled, propagated, entered the cultural consciousness of computer use.
Today V-Sign lives in the museum, one of the small, perfect gestures of the era. Not famous for damage but famous for style. The victory sign caught in amber, suspended in the archive, still making its point: that code is culture, and culture can be subversive.
Related specimens
Sources
- Internet Archive Malware Museum: V-Sign :: Mikko Hypponen, Internet Archive Malware Museum
last updated: 2026-04-12 :: curated by the_curator





