66A Virus

Virus Name: 66A Aliases: Satan-B V Status: Rare Discovery: April, 1992 Symptoms: .COM file growth; file date/time change; program execution failure; "Too many files open" error message Origin: Unknown Eff Length: 512 Bytes Type Code: PNCK - Parasitic Non-Resident COM Infector Detection Method: F-Prot, Sweep, ViruScan, AVTK, NAVDX, VAlert, IBMAV, NAV, PCScan, ChAV, NShld, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The 66A virus was received in April, 1992. Its origin or point of isolation are unknown. This virus is a memory resident infector of .COM files, including COMMAND.COM. When a program infected with the 66A virus is executed, this virus will search the current directory to locate all previously uninfected .COM files. As the uninfected .COM files are found, the virus will infect them. Programs infected with the 66A virus will have a file length increase of 512 bytes with the virus being located at the end of the infected file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time. The following text strings can be found within all 66A infected programs: "66A" "*.COM" "????????COM" The "66A" text string is used by the virus to determine if the file was previously infected, and is located at the end of the file. Programs infected with the 66A virus may fail to execute properly, or unusual error messages may occur, such as "Too many files open".