Virus Name: 621
V Status: Rare
Discovery: November, 1991
Symptoms: .COM file growth
Eff Length: 621 Bytes
Type Code: PNCK - Parasitic Non-Resident COM Infector
Detection Method: ViruScan, AVTK, Sweep, F-Prot, NAV, IBMAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N,
Removal Instructions: Delete infected files
The 621 virus was received in November, 1991. Its origin and point
of original isolation are unknown. 621 is a non-resident, direct
action infector of .COM files, including COMMAND.COM.
When a program infected with 621 is executed, the virus will search
the current drive and directory for an uninfected .COM program to
infect. When the first uninfected program is located, it will be
infected by the 621 virus. Infected programs increase in size by
621 bytes with the virus being located at the end of the infected
file. The following text strings will be found within the viral
code in infected programs:
"Water detected in math-co-processor"
"Something wonderful has happened, your PC is alive..."
It is unknown what 621 does besides replicate.