Virus Name: Spanz
V Status: Rare
Discovered: September, 1991
Symptoms: .COM growth; file date/time may disappear
Eff Length: 639 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, Sweep, AVTK, F-Prot, ChAV,
IBMAV, NAV, NAVDX, VAlert, PCScan,
NShld, Sweep/N, NProt, AVTK/N, LProt, NAV/N,
Removal Instructions: Delete infected files
The Spanz virus was received in September, 1991. It originated in
Europe. Spanz is a non-resident, direct action infector of .COM
files, including COMMAND.COM.
When a program infected with Spanz is executed, Spanz will search
the current directory to locate the first uninfected .COM program.
Once an uninfected .COM program is located, it will infect the
program. Infected .COM programs increase in size by 639 bytes, the
virus being located at the end of the infected file. If the
file's time in the disk directory was originally 12:00a, it will
now appear blank when a DIR command is issued.
Infected programs can be identified by the following text string
which occurs near the end of all infected files:
"INFECTED! * SPANZ *"
Spanz does not do anything besides replicate.