Ein Volk Virus

Virus Name: Ein Volk Aliases: V Status: Rare Discovered: April, 1993 Symptoms: .COM file growth Origin: West Germany Eff Length: 474 - 559 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: AVTK, F-Prot, ViruScan, Sweep, IBMAV, NAV, PCScan, NAVDX, VAlert, ChAV, NShld, Sweep/N, AVTK/N, NProt, IBMAV/N, Innoc, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Ein Volk virus was submitted in April, 1993, and appears to be from Germany. Ein Volk is a non-resident, direct action infector of .COM programs, including COMMAND.COM When a program infected with the Ein Volk virus is executed, this virus will infect all of the .COM programs located in the current directory. Infected .COM programs will have a file length increase of 474 to 559 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are visible within the viral code in all Ein Volk infected programs: ".. *.COM" "Ein volk, Ein reich, ein fhrer! John.L.VF!93" It is unknown what Ein Volk does besides replicate.