Democracy Virus

Virus Name: Democracy Aliases: V Status: Rare Discovered: December, 1993 Symptoms: .COM & .EXE growth; TSR; DOS DIR command output slowed/sluggish Origin: Unknown Eff Length: 3,959 - 3,973 Bytes Type Code: PRsA - Parasitic Resident .COM & .EXE Infector Detection Method: F-Prot, ViruScan, Sweep, AVTK, ChAV, NAVDX, VAlert, NAV, PCScan, Sweep/N, NShld, AVTK/N, Innoc, NAV/N Removal Instructions: Delete infected programs General Comments: The Democracy virus was received in December, 1993. Its origin or point of original isolation is unknown. Democracy is a memory resident infector of .COM and .EXE programs, but not COMMAND.COM. When the first Democracy infected program is executed, this virus will install itself memory resident as a low system memory TSR of 4,192 bytes. It will have hooked interrupts 01, 03 and 22. Once the Democracy virus is memory resident, it will infect .COM and .EXE programs larger than approximately 10K when they are executed. Infected programs will have a file length increase of 3,959 to 3,973 bytes with the virus being located at the end of the file. The file's date and time in the DOS disk directory listing will not have been altered. The following text string can be found at the very end of all Democracy infected files: "Democracy" Users of systems infected with the Democracy virus may experience slow or sluggish response to the DOS DIR command. It is unknown what else this virus may do besides replicate.