Warning Virus

Virus Name: Warning Aliases: V Status: Rare Discovered: May, 1992 Symptoms: .COM file growth; file date/time change; message & warm reboot Origin: Unknown Eff Length: 3,072 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, NAV, F-Prot, NAVDX, AVTK 7.68+, NShld, NAV/N, AVTK/N 7.68+ Removal Instructions: Delete infected files General Comments: The Warning virus was isolated in May, 1992. Its origin is unknown. Warning is a non-resident, direct action infect of .COM programs, including COMMAND.COM. When a program infected with the Warning virus is executed, the warning virus will infect one .COM program located in the current directory. Programs infected with the Warning virus will have a file length increase of 3,072 bytes. The virus will add code to both the beginning and end of infected files. The file's date and time in the DOS disk directory listing will have been updated to the current system date and time. If the Warning virus is unable to located an uninfected .COM program in the current directory, it will display the following message: "WARNING: This computer will self-destruct in 5 seconds" A pause occurs, and then approximately 5 seconds later a warm reboot will occur. The above message is not visible in infected files as it is encrypted.