Stone`90 Virus
Virus Name: Stone`90
Aliases: Polish 961, Stone-90
V Status: Rare
Discovered: December, 1990
Symptoms: .COM file growth
Origin: Poland
Eff Length: 961 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, PCScan,
NAV, IBMAV, NAVDX, VAlert, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
NAV/N, IBMAV/N
Removal Instructions: Delete infected files
General Comments:
The Stone`90 virus, or Polish 961, is a non-resident direct action
infector of .COM programs, including COMMAND.COM. It was submitted
in December, 1990, and is from Poland.
When a program infected with the Stone`90 virus is executed, the
virus will look for one .COM program on the current drive and in
the current directory to infect. If one is found, the virus will
infected it. The newly infected .COM program will increase in
length by 961 bytes, and have the virus's code located at the end
of the program.
The following text strings can be found in infected files:
"Sorry, I`m INFECTED!"
"I`m already NOT infected!"
"(C) Stone`90"
Stone`90 does not appear to do anything besides replicate.