Crazy Priest Virus
Virus Name: Crazy Priest
Aliases:
V Status: New
Discovery: January, 1995
Symptoms: .COM & .EXE growth
Origin: Unknown
Eff Length: 1,416 Bytes
Type Code: PNAK - Parasitic Non-Resident .COM & .EXE Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV,
NAVDX, VAlert, ChAV,
AVTK/N, IBMAV/N, NShld, Sweep/N, NProt, NAV/N,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Crazy Priest virus was received in January, 1995. Its origin or
point of isolation is unknown. Crazy Priest is a non-resident,
direct action infector of .COM and .EXE files, including COMMAND.COM.
It is unknown what it may do besides replicate.
When a program infected with the Crazy Priest virus is executed, this
virus will infect all of the .COM and .EXE files located in the
current directory. Infected files will have a file length increase
of 1,416 bytes with the virus being located at the end of the file.
The program's date and time in the DOS disk directory listing will
not be altered. The following text strings are encrypted within the
viral code:
"Hello i'm virus Crazy Priest !!!"
"HAPPY BIRTHDAY CRAZY !!!"
"BOOT,MBR"
"FAT"
"by CRAZY*.* COMMAND.COM"