Finnish antivirus firm F-Secure has spotted a new virus, Bacros, doing the rounds. Unlike the average virus which spreads over e-mail, IM or networks, Bacros is going back to the old school and copying itself to floppy discs and burning itself to CD-ROMs by using an autorun file in order to spread, although it can't copy itself to other portable storage like USB sticks. It infects local filesystem files by renaming all .txt files as .exe.
Bacros' harking back to the bad old early days of viruses doesn't stop there, though. Instead of using the infection to recruit a zombie army and make some money from spammers, Bacros goes for simple destruction.
If it infects a PC, the virus will delete all files from the victim's hard drive on Christmas Day.
In another sign that the writer behind Bacros is more likely after notoriety than cold, hard cash, the malware author has taken care to put his own distinctive stamp on the infected PC. On the first of any month, the virus will overwrite all gif files with a gif that says 'Kuole Jehova' - 'die Jehovah' in Finnish.
The writer also makes use of images to subject the victim to his patriotic side - on Finland's independence day, 6 December, the virus will set a small graphic of the Finnish flag as the background on the system.














And the victims will then realise that something needs to be done to prevent a recurrance.
Good - this will make the great unwashed that have no idea that their system is harbouring nasties abruptly sit up and take notice.
The legislators and law-enforcement agencies will have pressure brought on them. End result - for the common good, with a few casualties along the way!
Should be fairly easy to track and identify the author...