Virus Name: Rangel
V Status: New
Discovery: July, 1995
Symptoms: .EXE file growth; file date/time seconds = "18"
Eff Length: 5,000 Bytes
Type Code: PNE - Parasitic Non-Resident .EXE Infector
Detection Method: VAlert, AVTK, ViruScan, F-Prot, IBMAV, ChAV, NAV, NAVDX,
NShld, AVTK/N, NProt, IBMAV/N, NAV/N
Removal Instructions: Delete infected files
The Rangel or Rangel.5000 virus was received in July, 1995. Its
origin or point of isolation is unknown. Rangel is a non-resident
direct action infector of .EXE files.
When a program infected with the Rangel virus is executed, this
virus will infect one .EXE file located in the current directory.
Programs infected with the Rangel virus will have a file length
increase of 5,000 bytes with the virus being located at the the
beginning of the file. The program's date and time in the DOS disk
directory listing will not appear to be altered, though the seconds
field will have been set to "18". The following text string is
visible within the viral code in all infected files: