Virus Name: Lutil
V Status: New
Discovered: May, 1996
Symptoms: .COM file growth; file date/time changes
Eff Length: 591 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, NAVDX,
AVTK/N, IBMAV/N, NShld, NAV/N, Innoc
Removal Instructions: Delete infected programs
The Lutil virus was received in May, 1996, and is reported to be
"in the wild" in North America. Lutil is a non-resident, direct
action infector of .COM files, including COMMAND.COM. Its origin
or point of isolation is unknown.
When a program infected with the Lutil virus is executed, this
virus will infect one .COM file located in the current directory.
Infected .COM files will have a file length increase of 591 bytes
with the virus being located at the end of the file. The program's
date and time in the DOS disk directory listing will have been
updated to the current system date and time when infection occurred.
The following text strings are visible within the viral code:
".. OUSE ME EST ABDA"