Gliss Virus

Virus Name: Gliss Aliases: V Status: Rare Discovered: January, 1992 Symptoms: .COM file growth; messages Origin: Germany Eff Length: 1,247 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: AVTK, Sweep, F-Prot, IBMAV, NAV, ChAV, NAVDX, VAlert, ViruScan, PCScan, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, NShld Removal Instructions: Delete infected files General Comments: The Gliss virus was received from Germany in January, 1992. Gliss is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Gliss virus is executed, the virus will search the current directory for an uninfected .COM program to infect. If one is found, it will infect it, and display the following message (text placement not exact below, and "xxxxxxxx" will appear as the base file name of the .COM file which has just been infected): "Dies ist ein Demonstrations-Computervirus ! So gerade eben wurde das Program : xxxxxxxx.COM von diesem Virus befallen. Der VIRUS hangt sich an alle Files - in Laufwerk A - mit der Extention .COM an. Die Programme bleiben aber ablauffahig. Falls Sie Fragen zu Computerviren oder Datensicherheit und Datenschutz beim Einsatz von Personal Computer haben, fordern Sie unsere Informationsbroschure : - Der sichere und kontrollierbare PC - an. Gliss & Herweg GmbH Augustinusstrabe 7-11 D-5020 Frechen-Konigsdorf" If an uninfected .COM file is not found, the following message will be displayed (text placement not exact below): "Alle Com - Programme in Laufwerk A sind mit diesem VIRUS schon infiziert! Falls Sie Fragen zu Computerviren oder Datensicherheit und Datenschutz beim Einsatz von Personal Computer haben, fordern Sie unsere Informationsbroschure : - Der sichere und kontrollierbare PC - an. Gliss & Herweg GmbH Augustinusstrabe 7-11 D-5020 Frechen-Konigsdorf" Programs infected with the Gliss virus will have a file length increase of 1,247 bytes with the virus being located at the end of the infected file. The file's date and time in the DOS disk directory listing will not have been altered. All of the messages indicated above can be viewed in infected files. Gliss does not do anything besides infect programs and display messages.