621 Virus

Virus Name: 621 Aliases: Something V Status: Rare Discovery: November, 1991 Symptoms: .COM file growth Origin: Unknown Eff Length: 621 Bytes Type Code: PNCK - Parasitic Non-Resident COM Infector Detection Method: ViruScan, AVTK, Sweep, F-Prot, NAV, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The 621 virus was received in November, 1991. Its origin and point of original isolation are unknown. 621 is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with 621 is executed, the virus will search the current drive and directory for an uninfected .COM program to infect. When the first uninfected program is located, it will be infected by the 621 virus. Infected programs increase in size by 621 bytes with the virus being located at the end of the infected file. The following text strings will be found within the viral code in infected programs: "????????COM" "*.COM" "Water detected in math-co-processor" "PARITY ERROR" "System halted" "Something wonderful has happened, your PC is alive..." It is unknown what 621 does besides replicate.