June 16TH Virus
Virus Name: June 16TH
Aliases: Pretoria, June
V Status: Endangered
Discovered: April, 1990
Symptoms: .COM file growth; long disk accesses; June 16th FAT
Origin: Republic of South Africa
Eff Length: 879 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, NAV, Sweep,
IBMAV, NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: NAV, or delete infected files
The June 16TH, or Pretoria, virus was discovered in April 1990.
This virus is a non-resident generic .COM file infector, and is
encrypted. The first time an infected file is executed, the virus
will search the current drive (all directories) and infect all .COM
files found. The search period can be quite long, and it is very
obvious on hard disk based systems that the program is taking too
long to load.
On June 16TH of any year, the first time an infected file is
executed the virus will activate. On activation, the virus will
change all entries in the root directory and the file allocation
table to "ZAPPED".
The June 16TH virus is thought to have originated in South Africa.