Toxic Virus
Virus Name: Toxic
Aliases:
V Status: Viron
Discovery: March, 1993
Symptoms: .COM file corruption; programs fail to function properly
Origin: England
Eff Length: 171 Bytes Overwriting
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: F-Prot, Sweep, AVTK, ViruScan, IBMAV, NAV, NAVDX,
VAlert, PCScan, ChAV,
Sweep/N, Innoc, AVTK/N, NProt, IBMAV/N, NShld, NAV/N,
Innoc
Removal Instructions: Delete infected files
General Comments:
The Toxic virus was submitted in March, 1993, and is originally
from England. Toxic is a non-resident, direct action overwriting
virus which infect .COM programs, including COMMAND.COM. Infected
programs are permanently corrupted, and will not function properly.
When a program infected with the Toxic virus is executed, the Toxic
virus will infect one .COM program located in the current directory.
Infected programs will have the first 171 bytes of the host
program overwritten with the Toxic viral code. The file's date and
time in the DOS disk directory listing will not be altered. The
following text string can be found within the viral code in all
Toxic infected programs:
"*.COM [Toxic] By Toxic Crusader -=ARCV=-"