Virus Name: Otti
V Status: New
Discovered: January, 1996
Symptoms: .COM file growth; file date/time changes
Eff Length: 932 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: NAV, NAVDX, IBMAV, ViruScan, AVTK, F-Prot, PCScan, ChAV,
NAV/N, NShld, IBMAV/N, NProt, AVTK/N, Innoc
Removal Instructions: Delete infected files
The Otti virus was received in January, 1996. Its origin or point
of isolation is unknown. Otti is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a program infected with the Otti virus is executed, this virus
will infect one .COM file located in the current directory.
Infected programs will have a file length increase of 932 bytes with
the virus being located at the end of the file. The program's date
and time in the DOS disk directory listing will have been updated to
the current system date and time when infection occurred. The
following text string is visible at the end of all infected files:
Known variant(s) of Otti are:
Otti.937: Also received in January, 1996, this is a 937 byte
variant of the Otti virus described above. It adds 937 bytes
to the .COM files it infects, and also contains the text string
Origin: Unknown January, 1996.