Otti Virus

Virus Name: Otti Aliases: Otti.932 V Status: New Discovered: January, 1996 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 932 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: NAV, NAVDX, IBMAV, ViruScan, AVTK, F-Prot, PCScan, ChAV, NAV/N, NShld, IBMAV/N, NProt, AVTK/N, Innoc Removal Instructions: Delete infected files General Comments: The Otti virus was received in January, 1996. Its origin or point of isolation is unknown. Otti is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Otti virus is executed, this virus will infect one .COM file located in the current directory. Infected programs will have a file length increase of 932 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text string is visible at the end of all infected files: "OTTI FOREVER" Known variant(s) of Otti are: Otti.937: Also received in January, 1996, this is a 937 byte variant of the Otti virus described above. It adds 937 bytes to the .COM files it infects, and also contains the text string indicated above. Origin: Unknown January, 1996.