Congrats Virus
Virus Name: Congrats
Aliases: Congrats.918
V Status: New
Discovery: February, 1995
Symptoms: .EXE file growth
Origin: Unknown
Eff Length: 918 - 932 Bytes
Type Code: PNE - Parasitic Non-Resident .EXE Infector
Detection Method: F-Prot, AVTK, Sweep, IBMAV, ViruScan, VAlert,
NAV, NAVDX, ChAV,
Sweep/N, AVTK/N, IBMAV/N, NAV/N, NProt, NShld,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Congrats virus was received in February, 1995. Its origin or
point of isolation is unknown. Congrats is a non-resident, direct
action infector of .EXE files. It does not infect very small .EXE
files.
When a program infected with the Congrats virus is executed, this
virus will infect one .EXE file located in the current directory.
Programs infected with the Congrats virus will have a file length
increase of 918 to 932 bytes with the virus being located at the
end of the file. The program's date and time in the DOS disk
directory listing will not be altered. The following text string
is encrypted within the viral code:
"Congratulations, you have a virus"