Lutil Virus

Virus Name: Lutil Aliases: Lutil.591 V Status: New Discovered: May, 1996 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 591 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, NAVDX, ChAV, PCScan, AVTK/N, IBMAV/N, NShld, NAV/N, Innoc Removal Instructions: Delete infected programs General Comments: The Lutil virus was received in May, 1996, and is reported to be "in the wild" in North America. Lutil is a non-resident, direct action infector of .COM files, including COMMAND.COM. Its origin or point of isolation is unknown. When a program infected with the Lutil virus is executed, this virus will infect one .COM file located in the current directory. Infected .COM files will have a file length increase of 591 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code: ".. OUSE ME EST ABDA" "*.com" "????????COM"