Virus Name: MSJ
V Status: Rare
Discovered: December, 1992
Symptoms: .COM & .EXE growth; file date/time changes
Eff Length: 15,392 Bytes
Type Code: PNA - Parasitic Non-Resident .COM & .EXE Infector
Detection Method: AVTK, Sweep, F-Prot, ViruScan, IBMAV, NAV,
NAVDX, VAlert, PCScan, ChAV,
Sweep/N, NShld, Innoc, AVTK/N, NAV/N, NProt, IBMAV/N,
Removal Instructions: Delete infected files
The MSJ virus was submitted in December, 1992, and is originally
from Israel. MSJ is a non-resident, direct action infector of
.COM and .EXE programs, but not COMMAND.COM.
When a program infected with the MSJ virus is executed, the MSJ
virus will infect one .COM or .EXE program located on the C:
drive. Infected programs will have a file length increase of
15,392 bytes with the virus being located at the beginning of
the file. Infected .COM programs will have an .EXE file format
after infection. The program's date and time in the DOS disk
directory listing will have been updated to the current system
date and time when infection occurred. The following text
strings can be found within the MSJ viral code in all infected
"Insufficient disk space"
The following is the beginning of the very long message which is
contained within the viral code, unencrypted, within all infected
"Do not worry this virus is designed to avoide making any damage to"
"your files. A free Virus remover will be send to computer Magazines"
"by then 30th of oct 1992 So they can suppy to coustomers."
"This is a demonstration of what a Palestinian Boy can do."
The remainder of the message contains a political statement.