%%File: VIRS0764.TXT
%%Name/Aliases: Traceback, 3066, 3066-B, 3066-B2, Traceback-B, 
Traceback-B2
%%Platform: PC/MS-DOS
%%Type: Program., 
%%Disk Location: COM application., EXE application.
%%Features: Memory resident; TSR.
%%Damage: Corrupts a program or overlay files., Interferes with a 
running application.
%%Size: 3066
%%See Also: 
%%Notes: Spreads between COM and EXE fles.   Based on a rather 
complicated set of criteria, it will sometimes cause the text displayed 
on the screen to fall to the bottom, and then rise back up.  One hour 
after system infection, the characters will fall down the screen. After 
1 minute, screen is automaticly restored.  During damage, INT 09h will 
be hooked. Characters typed during damage will move "fallen-down" 
characters back to their start position. Damage repeats every hour.   
Typical text in Virus body (readable  with hex-dump-utilities):
                      1. "VG1" in the data area of the virus
                      2. "VG1" is found at offset of near-jmp-  
displacement if program is a .COM file.
                      3. The complete name of the file, which infected  
the currently loaded file, is in the code.
                      4. Search the last 16 bytes of a .COM or .EXE 
files for the hex-string:
                         58,2B,C6,03,C7,06,50,F3,A4,CB,90,50,E8,E2,03, 
8B