NoBock Virus


 Virus Name:  NoBock 
 Aliases:     440 
 V Status:    Rare 
 Discovered:  January, 1991 
 Symptoms:    .COM growth; message and system halt 
 Origin:      Europe 
 Eff Length:  440 Bytes 
 Type Code:   PNC - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, F-Prot, Sweep, AVTK, ChAV, 
                    IBMAV, NAV, NAVDX, VAlert, PCScan, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The NoBock virus was discovered in Europe in January, 1991.  NoBock 
       is a non-resident direct action infector of .COM files. 
 
       When a program infected with NoBock is executed, the virus will 
       check the system date.  If the date is other than between January 
       1, 1980 and September 30, 1980, it will display the following 
       message and halt the system, not infecting any other files: 
 
               "No Bock today Error, System halted!" 
 
       The drive will be left spinning. 
 
       If the system clock is set to a date between January 1, 1980 and 
       September 30, 1980, NoBock may infect one other .COM file in the 
       current drive and directory when an infected program is executed. 
       The virus, however, does not infect another program each time an 
       infected program is executed during this period of time. 
 
       NoBock infected files will have a file length increase of 440 bytes, 
       the virus will be located at the end of the infected program. 
       NoBock is an encrypted virus, and the above message cannot be viewed 
       within infected files. 

Show viruses from discovered during that infect .

Main Page