Spanz Virus

Virus Name: Spanz Aliases: V Status: Rare Discovered: September, 1991 Symptoms: .COM growth; file date/time may disappear Origin: Unknown Eff Length: 639 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, Sweep, AVTK, F-Prot, ChAV, IBMAV, NAV, NAVDX, VAlert, PCScan, NShld, Sweep/N, NProt, AVTK/N, LProt, NAV/N, Innoc, IBMAV/N Removal Instructions: Delete infected files General Comments: The Spanz virus was received in September, 1991. It originated in Europe. Spanz is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with Spanz is executed, Spanz will search the current directory to locate the first uninfected .COM program. Once an uninfected .COM program is located, it will infect the program. Infected .COM programs increase in size by 639 bytes, the virus being located at the end of the infected file. If the file's time in the disk directory was originally 12:00a, it will now appear blank when a DIR command is issued. Infected programs can be identified by the following text string which occurs near the end of all infected files: "INFECTED! * SPANZ *" Spanz does not do anything besides replicate.