Fission Virus

Virus Name: Fission Aliases: V Status: New Discovered: January, 1995 Symptoms: .COM, .EXE, .BAT file growth; .BAT files fail to function; decrease in total available free memory Origin: Unknown Eff Length: 517 Bytes Type Code: PRhA - Parasitic Resident .COM, .EXE, .BAT Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAVDX, VAlert, NAV, PCScan, ChAV, AVTK/N, IBMAV/N, NShld, Sweep/N, NProt, NAV/N, LProt, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Fission virus was received in January, 1995. Its origin or point of isolation is unknown. Fission is a memory resident infector of .COM, .EXE, and .BAT files. It does not infect COMMAND.COM. When the first Fission infected program is executed, this virus will become memory resident at the top of system memory but below the 640K DOS boundary, hooking interrupt 21. Total available memory, as indicated by the DOS 5.0 CHKDSK program, will have decreased by approximately 800 bytes. Once the Fission virus is memory resident, it will infect .COM, .EXE, and .BAT files, but not COMMAND.COM, when they are executed. Infected files will have a file length increase of 517 bytes with the virus being located at the end of the file. The file's date and time in the DOS disk directory listing will not be altered. The following text string is visible within the viral code in all Fission infected files: "[Binary Fission] v1.0 [MS/PS]" .BAT files will fail to function properly once they have been infected by the Fission virus.