Jeff Virus

Virus Name: Jeff Aliases: June 7 V Status: Rare Discovered: December, 1990 Symptoms: .COM growth; overwritten sectors on hard disk Origin: United States Eff Length: 814 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, Sweep, PCScan, IBMAV, NAV, NAVDX, VAlert, ChAV, NShld, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The Jeff virus was isolated in the United States in December, 1990. This virus is a non-resident infector of .COM files, including COMMAND.COM. When a program infected with the Jeff virus is executed, the virus will attempt to infect one .COM file on the C: drive, starting in the root directory. Infected .COM files will increase in size by 814 to 828 bytes, with the virus being located at the end of the infected program. The Jeff virus received its name from the following text string which is encrypted in the viral code: "Jeff is visiting your hard disk" While Jeff is visiting your hard disk, it will occasionally write some sectors of random memory contents to the hard disk. If these sectors are written to the boot sector, master boot sector, or FAT, the contents of the disk may become inaccessible or produce unexpected results.