Virus Name: Warning
V Status: Rare
Discovered: May, 1992
Symptoms: .COM file growth; file date/time change; message & warm
Eff Length: 3,072 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, NAV, F-Prot, NAVDX, AVTK 7.68+,
NShld, NAV/N, AVTK/N 7.68+
Removal Instructions: Delete infected files
The Warning virus was isolated in May, 1992. Its origin is
unknown. Warning is a non-resident, direct action infect of .COM
programs, including COMMAND.COM.
When a program infected with the Warning virus is executed, the
warning virus will infect one .COM program located in the current
directory. Programs infected with the Warning virus will have a
file length increase of 3,072 bytes. The virus will add code to
both the beginning and end of infected files. The file's date and
time in the DOS disk directory listing will have been updated to
the current system date and time.
If the Warning virus is unable to located an uninfected .COM program
in the current directory, it will display the following message:
"WARNING: This computer will self-destruct in 5 seconds"
A pause occurs, and then approximately 5 seconds later a warm
reboot will occur. The above message is not visible in infected
files as it is encrypted.