FeelBad Virus
Virus Name: FeelBad
Aliases:
V Status: Rare
Discovered: July, 1994
Symptoms: .COM file growth; file date/time seconds = "58"
Origin: Unknown
Eff Length: 1,124 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, AVTK, IBMAV, Sweep, NAV, NAVDX,
VAlert, PCScan,
NShld, NProt, AVTK/N, Sweep/N, IBMAV/N, NAV/N
Removal Instructions: Delete infected files
General Comments:
The FeelBad virus was submitted in July, 1994. Its origin or point
of isolation is unknown. FeelBad is a non-resident, direct action
infector of .COM programs, including COMMAND.COM.
When a program infected with the FeelBad virus is executed, this
virus will infect all of the .COM programs located in the current
directory. Infected programs will have a file length increase of
1,124 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will appear
to be unaltered, but the seconds field will have been set to "58".
The following text strings are visible within the viral code in all
infected programs:
"Hello..."
"We're very sorry for disturbing your session."
"We just wanted to state that we feel bad about Ritzen."
"We have taken the utmost care to insure that nothing
has been damaged."
"Please go on with whatever You were doing."