Yankee 2 Virus
Virus Name: Yankee 2
Aliases: Yankee Virus, Yankee-go-Home, 1961, Old Yankee
V Status: Endangered
Discovered: September, 1989
Symptoms: .EXE growth; Yankee Doodle melody
Eff Length: 1,961 Bytes
Type Code: PNE - Parasitic Non-Resident .EXE Infector
Detection Method: ViruScan, NAV, F-Prot, Sweep, AVTK,
IBMAV, NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: Delete infected files
The Yankee 2, or Yankee virus, was isolated in Bulgaria in 1989.
Unlike the Yankee Doodle virus, the Yankee 2 virus is not memory
resident. It also only infects .EXE files, adding 1,961 bytes to
their length. The virus will attempt to infect an .EXE file in the
current directory whenever an infected program is executed. If it
is successful in locating an uninfected .EXE file, and infects it,
Yankee Doodle will be played on the system speaker. Infected files
will have the hex string '6D6F746865726675636B6572' at the end.
The Yankee 2 virus will not infect CodeView.
Known variant(s) of Yankee 2 are:
1624: This variant is similar to Yankee 2 in function, the major
change is that its effective length is 1,624 bytes.