Xram Virus

Virus Name: Xram Aliases: Xram.1000 V Status: New Discovery: January, 1996 Symptoms: .COM file growth; message displayed Origin: Unknown Eff Length: 1,000 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ChAV, F-Prot, AVTK, IBMAV, NAV, NAVDX, ViruScan 2.54+, Innoc, AVTK/N, IBMAV/N, NAV/N, NShld 2.33+ Removal Instructions: Delete infected files General Comments: The Xram or Xram.1000 virus was received in January, 1996. Its origin or point of isolation is unknown. Xram is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Xram virus is executed, this virus will infect one .COM file located in the current directory. The following message will then be displayed until the system user presses a key on the system keyboard, then normal program output will resume: "** El COBOL no sirve, es una Mierda **" Programs infected with the Xram virus will have a file length increase of 1,000 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are visible within the viral code: "*.com" "** El COBOL no sirve, es una Mierda **" "(C) Karl Xram"