June 16TH Virus

Virus Name: June 16TH Aliases: Pretoria, June V Status: Endangered Discovered: April, 1990 Symptoms: .COM file growth; long disk accesses; June 16th FAT alteration Origin: Republic of South Africa Eff Length: 879 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, NAV, Sweep, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: NAV, or delete infected files General Comments: The June 16TH, or Pretoria, virus was discovered in April 1990. This virus is a non-resident generic .COM file infector, and is encrypted. The first time an infected file is executed, the virus will search the current drive (all directories) and infect all .COM files found. The search period can be quite long, and it is very obvious on hard disk based systems that the program is taking too long to load. On June 16TH of any year, the first time an infected file is executed the virus will activate. On activation, the virus will change all entries in the root directory and the file allocation table to "ZAPPED". The June 16TH virus is thought to have originated in South Africa.