Manta Virus

Virus Name: Manta Aliases: V Status: Rare Discovered: July, 1991 Symptoms: .COM file growth; AUTOEXEC.BAT & CONFIG.SYS replaced; programs fail to execute properly Origin: Unknown Eff Length: 1,077 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, ChAV, NAV, IBMAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Manta virus was received in July, 1991. Its origin is unknown. Manta is a non-resident direct action infector of .COM files, including COMMAND.COM. Manta is based on the VCS virus. When a program infected with Manta is executed, up to four .COM files in the current directory may be infected by the Manta virus. Additionally, the following message may be displayed, and the AUTOEXEC.BAT and CONFIG.SYS files on drive C: may be replaced: "RAM Parity Error @ 0F67:1B2C (C)ontinue (S)hut off NMI (R)eboot If C is entered for "Continue", the program will then most likely function properly. A blank entry may also be created in the current directory for a 512 byte file, though this does not always occur. Programs infected with the Manta virus will increase in size by 1,077 bytes, the virus will be located at the end of the infected file. The 512 byte file which replaced AUTOEXEC.BAT and CONFIG.SYS on drive C: willl contain the above message, and several lines of text in German. See: VCS