Industrial Virus

Virus Name: Industrial Aliases: Industrial.1841 V Status: In the wild Discovered: July, 1996 Symptoms: .COM file growth Origin: Unknown Eff Length: 1,841 Bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, NAVDX, NProt, AVTK/N, IBMAV/N, NShld, NAV/N Removal Instructions: Delete infected files General Comments: The Industrial virus was received in July, 1996, and is reported to be "in the wild". Its origin or point of isolation is unknown. This virus is a non-memory resident infector of .COM files, but not COMMAND.COM. When a program infected with the Industrial virus is executed, this virus will infect one .COM file located in the current directory. The selection of the file infected is in a more or less random manner. Programs infected with the Industrial virus will have a file length increase of 1,841 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the viral code: "Warning lights are flashing down at Quality Control" "somebody threw a spanner and they threw him in the hold" "there's rumors in the loading bay and anger in the town" "Somebody blew the whistle and the walls came down" "there's a meeting in the boardroom they're trying to trace the smell" "there's a leaking in the washroom there's a sneak in personnel" "somewhere in the corridors someone was heard to sneeze" "'goodness me could this be Industrial Disease?'" "('Industrial Disease' by Mark Knopfler)." "You should have protected your disk better - this could have been a dangerous" "virus. You have been lucky this time..." "(As all other programs this virus is protected against copying by federal law.)" "Press any key to start your own program:" "\*.* \*.*" One text string is visible within infected files: "SPIL\*.*"