Job Virus

Virus Name: Job Aliases: Job.405 V Status: New Discovered: January, 1996 Symptoms: .EXE file growth; file date/time changes; message displayed Origin: Unknown Eff Length: 405 Bytes Type Code: PNE - Parasitic Non-Resident .EXE Infector Detection Method: AVTK, ViruScan, NAV, NAVDX, F-Prot, IBMAV, PCScan, ChAV, AVTK/N, NAV/N, NShld, NProt, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Job or Job.405 virus was received in January, 1996. Its origin or point of isolation is unknown. Job is a non-resident, direct action infector of .EXE files. When a program infected with the Job virus is executed, this virus will infect one .EXE file located in the current directory. Infected files will have a file length increase of 405 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code in all infected programs: "*.exe" "I did my job! :)" The second text string above will be displayed on the system monitor as a message when an infected program is executed and all of the .EXE files in the current directory were previously infected by the virus.