%%File: VIRS0116.TXT
%%Name/Aliases: Alabama, Alabama-B, Alabama.C
%%Platform: PC/MS-DOS
%%Type: Program., Encrypted/Stealth The virus actively hides., 
%%Disk Location: EXE application.
%%Features: Encrypted, Direct acting.
%%Damage: Corrupts the file linkages or the FAT., Interferes with a 
running application., Corrupts a program or overlay files.
%%Size: 1560
%%See Also: 
%%Notes: The Alabama virus is a memory resident, encrypting, .EXE file 
infector. The virus contains the string,
    SOFTWARE COPIES PROHIBITED BY INTERNATIONAL LAW.         
    Box 1055 Tuscambia ALABAMA USA.       
which is displayed after an hour of use on an infected machine.
It hooks Crtl-Alt-Del and fakes a reboot when they are pressed, staying 
in memory.
On Fridays, it does strange things like executing different files from 
those you selected.  The following text on the screen,
    SOFTWARE COPIES PROHIBITED BY INTERNATIONAL LAW.         
    Box 1055 Tuscambia ALABAMA USA. 
Executing one file and having a different one start running.     
v6-151: At least one anti-virus program can detect and remove Alabama.C