Naught-865 Virus
Virus Name: Naught-865
Aliases:
V Status: Viron
Discovered: September, 1993
Symptoms: All file types may be corrupted; file date/time changes;
Boot failure from system hard disk
Origin: Unknown
Eff Length: 865 Bytes
Type Code: ONAK - Overwriting Non-Resident Generic File Infector
Detection Method: AVTK, IBMAV, ViruScan, NAV, NAVDX, VAlert,
F-Prot, PCScan, ChAV,
AVTK/N, NShld, NProt, Sweep/N, IBMAV/N, NAV/N, LProt,
Innoc
Removal Instructions: Delete infected files
General Comments:
The Naught-865 virus was submitted in September, 1993. Its origin or
point of isolation is unknown. Naught-865 is a non-resident, direct
action infector of the C: drive root directory. It will infect both
program and data files.
When a program infected with the Naught-865 virus is executed, the
Naught-865 virus will overwrite all of the program and data files
present in the C: drive root directory. These files will have the
first 865 bytes replaced by the Naught-865 viral code. The file's
date in the DOS disk directory listing will have the year changed to
the year in the current system date. The file time will be altered
to the system time when infection occurred. The following text
strings can be found near the beginning of all infected files:
"*.*"
"????????"
Since Naught-865 overwrites all files in the C: drive root directory,
infected systems will fail to boot. Additionally, other programs
located in this directory will not function, and any data, .BAT, or
configuration files in the directory will be corrupted.