Dagger Virus
Virus Name: Dagger
Aliases: Dagger.483
V Status: New
Discovery: January, 1996
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 483 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: IBMAV, PCScan, NAV, NAVDX, AVTK, ViruScan 2.50+, F-Prot,
ChAV,
IBMAV/N, LProt, NAV/N, AVTK/N, NShld 2.32 9606+,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Dagger virus was received in January, 1996. Its origin or point
of isolation is unknown. Dagger is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a program infected with the Dagger virus is executed, this
virus will infect one .COM file located in the current directory.
Infected .COM files will have a file length increase of 483 bytes
with the virus being located at the end of the file. The program's
date and time in the DOS disk directory listing will not be altered.
The following text strings are visible within the viral code:
".. *.* *.COM"
"@dH"
The second text string can be found at the very end of all infected
files.