Panic Virus
Virus Name: Panic
Aliases: Cartier, Panic.1056
V Status: New
Discovery: January, 1995
Symptoms: .COM file growth; message
Origin: Unknown
Eff Length: 1,056 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, Sweep, NAV, ChAV,
ViruScan, NAVDX, VAlert, PCScan,
NProt, IBMAV/N, AVTK/N, Sweep/N, NShld, NAV/N, LProt,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Panic or Cartier virus was received in January, 1995. Its
origin or point of isolation is unknown. Panic is a non-resident,
direct action infector of .COM files, including COMMAND.COM. It
displays a message.
When a program infected with the Panic virus is executed, this
virus will infect the first .COM file located in the current
directory. Programs infected with the Panic virus will have a file
length increase of 1,056 bytes with the virus being located at the
end of the file. The program's date and time in the DOS disk
directory listing will not be altered. The following text strings
are visible within the viral code in all Panic infected files:
"????????COM?"
"*.COM"
"Don't panic it, I am just a virus named [Cartier].
Nice to meet you !"
"You are so dirty to get software without any payments !
I don't like it !"
"So, I destroy all of your datas in the hard disk now !
Feel so good !"
"I wish you like that !"
"What about a drink ?"
"See you next time !"
Once all of the .COM files in the current directory have become
infected, this virus will will display the above text, with the
exception of the first two text strings above, in a box flashing in
the middle of the system display when an infected program is
executed.