There are 2 variants:
- Virus.DOS.Suicide.2048 (A and B)
When the virus is run, it infects first 5 uninfected executable files from current directory, EXE files are infected first, followed by COM.
Files infected by the virus might not function properly which would hang the system when run.
The payload activates randomly.
The payload draws an ASCII image showing someone is hanging themselves (which can be confused for a whale being caught), it also displays the following:
Your PC has been infected by the Suicide virus. I will now kill myself. Press D to disinfect. PHALCON/SKISM 1992 Hard at work to make your life a living hell
If the DOS version is earlier than 3.0, it displays the following instead:
Your PC has been infected by the Suicide virus. I would disinfect myself, but I despise DOS 2.X Upgrade now! Brought to you by PHALCON/SKISM 1992
The virus waits for a keystroke, it claimed if the user presses "D" key it would disinfect that file, but actually it would not.
Suicide.2048.b contains bugs that may hang the system when run, debugging is required in order to spread.
The virus contains the encrypted text strings:
*.COM *.EXE .. [Suicide] Written by Dark Angel of PHALCON/SKISM Ross M. Greenberg blows goats.