Virus Name: Job
V Status: New
Discovered: January, 1996
Symptoms: .EXE file growth; file date/time changes; message displayed
Eff Length: 405 Bytes
Type Code: PNE - Parasitic Non-Resident .EXE Infector
Detection Method: AVTK, ViruScan, NAV, NAVDX, F-Prot, IBMAV,
AVTK/N, NAV/N, NShld, NProt, IBMAV/N, Innoc
Removal Instructions: Delete infected files
The Job or Job.405 virus was received in January, 1996. Its origin
or point of isolation is unknown. Job is a non-resident, direct
action infector of .EXE files.
When a program infected with the Job virus is executed, this virus
will infect one .EXE file located in the current directory.
Infected files will have a file length increase of 405 bytes with
the virus being located at the end of the file. The program's date
and time in the DOS disk directory listing will have been updated
to the current system date and time when infection occurred. The
following text strings are visible within the viral code in all
"I did my job! :)"
The second text string above will be displayed on the system
monitor as a message when an infected program is executed and all
of the .EXE files in the current directory were previously
infected by the virus.