Virus Name: Bob
V Status: Rare
Discovery: February, 1992
Symptoms: .COM file growth
Eff Length: 718 - 1,414 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, NAV, AVTK, ChAV,
IBMAV, Sweep, NAVDX, VAlert, PCScan,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: Delete infected files
The Bob virus was submitted in February, 1992. Its origin, or
point of isolation, are unknown. Bob is a non-resident, direct
action infector of .COM programs, including COMMAND.COM.
When a program infected with the Bob virus is executed, this virus
will infect all the previously uninfected .COM programs located
in the current directory of the current drive. Infected programs
will usually have a file length increase of 718 bytes, though if
the file's original length was less than 698 bytes, its length
will become 1,416 bytes. The virus will be located at the beginning
of the program. The file's date and time in the DOS disk directory
listing will not be altered.
The following text strings can be found in all Bob infected
"Program terminated normally"
It is unknown if the Bob virus does anything besides replicate.