Satyricon Virus

Virus Name: Satyricon Aliases: Demon.348, Satyricon.348 V Status: Rare Discovered: August, 1994 Symptoms: .COM file growth; beeping; programs fail to function properly Origin: Unknown Eff Length: 350 - 364 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, Sweep, ViruScan, NAV, NAVDX, VAlert, AVTK/N, Sweep/N, NProt, IBMAV/N, NShld, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Satyricon, Demon.348 or Satyricon.348, virus was received in August, 1994. Its origin or point of isolation is unknown. Satyricon is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Satyricon virus is executed, this virus will infect all of the .COM files in the current directory, as well as the copy of COMMAND.COM located in the C: drive root directory. Infected programs will have a file length increase of 350 to 364 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are visible within the viral code in all infected files: "*.COM C:\COMMAND.COM" "ð=-DEMON-=ð" Beeping may be emitted from the system speaker when infected programs are executed, as well as the user being returned to the DOS prompt.