Yankee 2 Virus

 Virus Name:  Yankee 2 
 Aliases:     Yankee Virus, Yankee-go-Home, 1961, Old Yankee 
 V Status:    Endangered 
 Discovered:  September, 1989 
 Symptoms:    .EXE growth; Yankee Doodle melody 
 Origin:      Bulgaria 
 Eff Length:  1,961 Bytes 
 Type Code:   PNE - Parasitic Non-Resident .EXE Infector 
 Detection Method:  ViruScan, NAV, F-Prot, Sweep, AVTK, 
                    IBMAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Yankee 2, or Yankee virus, was isolated in Bulgaria in 1989. 
       Unlike the Yankee Doodle virus, the Yankee 2 virus is not memory 
       resident.  It also only infects .EXE files, adding 1,961 bytes to 
       their length.  The virus will attempt to infect an .EXE file in the 
       current directory whenever an infected program is executed.  If it 
       is successful in locating an uninfected .EXE file, and infects it, 
       Yankee Doodle will be played on the system speaker.  Infected files 
       will have the hex string '6D6F746865726675636B6572' at the end. 
       The Yankee 2 virus will not infect CodeView. 
       Known variant(s) of Yankee 2 are: 
       1624: This variant is similar to Yankee 2 in function, the major 
             change is that its effective length is 1,624 bytes. 
       See:   Enigma 

Show viruses from discovered during that infect .

Main Page