Realize Virus
Virus Name: Realize
Aliases: Realize.498
V Status: New
Discovery: July, 1995
Symptoms: .COM file growth
Origin: Sweden
Eff Length: 498 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, VAlert, Sweep, ViruScan, IBMAV,
NAV, NAVDX, ChAV,
Sweep/N, IBMAV/N, NShld, NProt, NAV/N, AVTK/N, Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Realize or Realize.498 virus was received in July, 1995. It
appears to be from Sweden. Realize is a non-resident, direct
action infector of .COM files, including COMMAND.COM.
When a program infected with the Realize virus is executed, this
virus will infect up to five .COM files located in the current
directory. Host programs which were originally larger than 498
bytes in length will have a file length increase of 498 bytes while
programs which were smaller than 498 bytes will become 996 bytes
in length. The virus will be located at the beginning of the file.
The file's date and time in the DOS disk directory listing will not
be altered. The following text strings are visible within the viral
code:
"PK"
"WHAT? I gotta die before you [realiZe] I was a nigga with
open eyes.Don't you hear the guns you stupid, dumb, dicksuckin,
bum politicians![realiZe] - THE LOST FREEDOM / SWEDEN"
"*.cOm"
The "PK" text string can be found starting in the fourth byte of
all infected files.