Naught-865 Virus


 Virus Name:  Naught-865 
 Aliases:    
 V Status:    Viron 
 Discovered:  September, 1993 
 Symptoms:    All file types may be corrupted; file date/time changes; 
              Boot failure from system hard disk 
 Origin:      Unknown 
 Eff Length:  865 Bytes 
 Type Code:   ONAK - Overwriting Non-Resident Generic File Infector 
 Detection Method:  AVTK, IBMAV, ViruScan, NAV, NAVDX, VAlert, 
                    F-Prot, PCScan, ChAV, 
                    AVTK/N, NShld, NProt, Sweep/N, IBMAV/N, NAV/N, LProt, 
                    Innoc 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Naught-865 virus was submitted in September, 1993.  Its origin or 
       point of isolation is unknown.  Naught-865 is a non-resident, direct 
       action infector of the C: drive root directory.  It will infect both 
       program and data files. 
 
       When a program infected with the Naught-865 virus is executed, the 
       Naught-865 virus will overwrite all of the program and data files 
       present in the C: drive root directory.  These files will have the 
       first 865 bytes replaced by the Naught-865 viral code.  The file's 
       date in the DOS disk directory listing will have the year changed to 
       the year in the current system date.  The file time will be altered 
       to the system time when infection occurred.  The following text 
       strings can be found near the beginning of all infected files: 
 
               "*.*" 
               "????????" 
 
       Since Naught-865 overwrites all files in the C: drive root directory, 
       infected systems will fail to boot.  Additionally, other programs 
       located in this directory will not function, and any data, .BAT, or 
       configuration files in the directory will be corrupted. 

Show viruses from discovered during that infect .

Main Page