WW-658 Virus

Virus Name: WW-658 Aliases: 658 V Status: New Discovered: August, 1993 Symptoms: .COM & .EXE file growth Origin: Unknown Eff Length: 658 Bytes Type Code: PRaAK - Parasitic Resident .COM & .EXE Infector Detection Method: ViruScan, NAV, NAVDX, AVTK, IBMAV, F-Prot, ChAV, NShld, NAV/N, AVTK/N, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The WW-658, or 658, virus was received in August, 1993. Its origin or point of isolation is unknown. WW-658 is a memory resident infector of .COM and .EXE programs, including COMMAND.COM. When the first WW-658 infected program is executed, this virus will install itself memory resident in a "hole" in low allocated system memory, hooking interrupt 21. Total system and available free memory, as indicated by the DOS CHKDSK program, will not be altered. Once memory resident, WW-658 will infect .COM and .EXE programs when they are executed. Infected programs will have a file length increase of 658 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text string can be located at the very end of all WW-658 infected programs: "WW"