Accept Virus

Virus Name: Accept Aliases: Accept.3619 V Status: Rare Discovery: July, 1994 Symptoms: .COM & .EXE file growth; TSR Origin: Unknown Eff Length: 3,619 Bytes Type Code: PRsA - Parasitic Resident .COM & .EXE Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAVDX, VAlert, NAV, PCScan, ChAV, AVTK/N, Sweep/N, IBMAV/N, NShld, NProt, NAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Accept, or Accept.3619, virus was received in July, 1994. Its origin or point of isolation is unknown. Accept is a memory resident infector of .COM and .EXE programs, but not COMMAND.COM. When the first Accept infected program is executed, this virus will install itself as a low system memory TSR of 8,160 bytes, hooking interrupts 21 and 7E. Once memory resident, it will infect all of the .COM and .EXE programs in the current directory when any program is executed. Programs infected with the Accept virus will have a file length increase of 3,619 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text string is encrypted within the Accept viral code: "ME PERDI A ACCEPT, SOY UN PELOTUDO" It is unknown what Accept does besides replicate. Known variant(s) of Accept are: Accept.3773: Received in July, 1996, this variant is "in the wild". Its memory resident TSR is 8,272 bytes, hooking interrupts 21 and 7E. Once resident, it will infect between four and six .COM and/or .EXE files located in the current directory when a program is executed. Infected programs will have a file length increase of 3,773 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the viral code: "ME PERDI A ACCEPT, SOY UN PELOTUDO=" "*.COM *.EXE COMMANDSCANCLEANNAVCPAVBOOTSAFEVSAFEIBMAVSHVGUARD VIRTESTVCAREDAILYDISKPART" Origin: Unknown July, 1996.