Rangel Virus

Virus Name: Rangel Aliases: Rangel.5000 V Status: New Discovery: July, 1995 Symptoms: .EXE file growth; file date/time seconds = "18" Origin: Unknown Eff Length: 5,000 Bytes Type Code: PNE - Parasitic Non-Resident .EXE Infector Detection Method: VAlert, AVTK, ViruScan, F-Prot, IBMAV, ChAV, NAV, NAVDX, NShld, AVTK/N, NProt, IBMAV/N, NAV/N Removal Instructions: Delete infected files General Comments: The Rangel or Rangel.5000 virus was received in July, 1995. Its origin or point of isolation is unknown. Rangel is a non-resident direct action infector of .EXE files. When a program infected with the Rangel virus is executed, this virus will infect one .EXE file located in the current directory. Programs infected with the Rangel virus will have a file length increase of 5,000 bytes with the virus being located at the the beginning of the file. The program's date and time in the DOS disk directory listing will not appear to be altered, though the seconds field will have been set to "18". The following text string is visible within the viral code in all infected files: "(C) RANGEL"