Eliza Virus

Virus Name: Eliza Aliases: V Status: Rare Discovered: December, 1991 Symptoms: .COM file growth Origin: Unknown Eff Length: 1,193 - 1,194 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, Sweep, NAV, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Eliza virus was submitted in December, 1991. Its origin is unknown. Eliza is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with Eliza is executed, the virus may infect one .COM file located in the current directory, though it does not always do this. If COMMAND.COM is located in the current directory, it may become infected. Eliza infected programs have a file length increase of 1,193 or 1,194 bytes, with the virus being located at the beginning of the infected program. COMMAND.COM, however, is an exception as it will not have any file length increase. Infected programs will not have had their file date and time in a DOS disk directory listing altered. The following text string can be found within the viral code in Eliza infected programs: "*.COM *.EXE *.* MJ" It is unknown if Eliza does anything besides replicate.