%%File: VIRS0482.TXT %%Name/Aliases: Jerusalem, Jerusalem A, Black Hole, Blackbox, 1808, 1813, Israeli, Hebrew University, Black Friday, Friday 13th, PLO, Russian, Kylie (variant), Scott's Valley, Mule, Slow,Timor, Zerotime, Zerotime.Australian %%Platform: PC/MS-DOS %%Type: Program., %%Disk Location: COM application., EXE application., Program overlay files. %%Features: Memory resident; TSR. %%Damage: Interferes with a running application., Corrupts a program or overlay files., Deletes or moves files. %%Size: 1813 Change in size of .COM files, 1808-1823 .EXE files: length mod 16 is 0, Multiple infections of .EXE files are possible %%See Also: %%Notes: Spreads between executable files (.COM or .EXE). On Friday the 13th, it erases any file that is executed, and on other days a two line black rectangle will appear at the bottom of the screen. Once this virus installs itself (once an infected COM or EXE file is executed), any other COM or EXE file executed will become infected. Kylie is difficult to spread. Mule variant uses encryption. EXE files too large to run, odd screen behavior and general slowdown, works well on LANs 1. "MsDos" and "COMMAND.COM" in the Data area of the virus 2. "MsDos" are the last 5 bytes if the infected program is a .COM file.