MSJ Virus

Virus Name: MSJ Aliases: V Status: Rare Discovered: December, 1992 Symptoms: .COM & .EXE growth; file date/time changes Origin: Israel Eff Length: 15,392 Bytes Type Code: PNA - Parasitic Non-Resident .COM & .EXE Infector Detection Method: AVTK, Sweep, F-Prot, ViruScan, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, Sweep/N, NShld, Innoc, AVTK/N, NAV/N, NProt, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The MSJ virus was submitted in December, 1992, and is originally from Israel. MSJ is a non-resident, direct action infector of .COM and .EXE programs, but not COMMAND.COM. When a program infected with the MSJ virus is executed, the MSJ virus will infect one .COM or .EXE program located on the C: drive. Infected programs will have a file length increase of 15,392 bytes with the virus being located at the beginning of the file. Infected .COM programs will have an .EXE file format after infection. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings can be found within the MSJ viral code in all infected programs: "exe" "comspec" "Insufficient disk space" "\*.exe" "\*.com" "COMMAND.COM" "c:\autoexec.bat" "NOHARD" "COMSPEC" The following is the beginning of the very long message which is contained within the viral code, unencrypted, within all infected programs: "Do not worry this virus is designed to avoide making any damage to" "your files. A free Virus remover will be send to computer Magazines" "by then 30th of oct 1992 So they can suppy to coustomers." "This is a demonstration of what a Palestinian Boy can do." The remainder of the message contains a political statement.