Satyricon Virus


 Virus Name:  Satyricon 
 Aliases:     Demon.348, Satyricon.348 
 V Status:    Rare 
 Discovered:  August, 1994 
 Symptoms:    .COM file growth; beeping; 
              programs fail to function properly 
 Origin:      Unknown 
 Eff Length:  350 - 364 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  F-Prot, AVTK, IBMAV, Sweep, ViruScan, 
                    NAV, NAVDX, VAlert, 
                    AVTK/N, Sweep/N, NProt, IBMAV/N, NShld, NAV/N, LProt 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Satyricon, Demon.348 or Satyricon.348, virus was received in 
       August, 1994.  Its origin or point of isolation is unknown.  Satyricon 
       is a non-resident, direct action infector of .COM files, including 
       COMMAND.COM. 
 
       When a program infected with the Satyricon virus is executed, this 
       virus will infect all of the .COM files in the current directory, as 
       well as the copy of COMMAND.COM located in the C: drive root 
       directory.  Infected programs will have a file length increase of 
       350 to 364 bytes with the virus being located at the end of the file. 
       The program's date and time in the DOS disk directory listing will 
       not be altered.  The following text strings are visible within the 
       viral code in all infected files: 
 
               "*.COM C:\COMMAND.COM" 
               "=-DEMON-=" 
 
       Beeping may be emitted from the system speaker when infected programs 
       are executed, as well as the user being returned to the DOS prompt. 

Show viruses from discovered during that infect .

Main Page