Over-4032 Virus

Virus Name: Over-4032 Aliases: Pascal-4032 V Status: Viron Discovered: June, 1993 Symptoms: .EXE files overwritten; file date/time changes; programs fail to function properly; "File not found" message Origin: Unknown Eff Length: 4,032 Bytes Overwriting Type Code: ONE - Overwriting Non-Resident .EXE Infector Detection Method: F-Prot, AVTK, Sweep, IBMAV, ViruScan, NAVDX, NAV, VAlert, PCScan, ChAV, AVTK/N, Sweep/N, NShld, NProt, IBMAV/N, Innoc, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Over-4032 or Pascal-4032 virus was received in June, 1993. Its origin or point of isolation is unknown. Over-4032 is a non- resident overwriting virus which infects .EXE programs. It permanently corrupts the programs it infects. When a program infected with the Over-4032 virus is executed, this virus will infect one previously infected .EXE program located in the current directory. Infected programs will have the first 4,032 bytes of the host program overwritten by the virus. Unless the virus was originally smaller than 4,032 bytes, there will be no file length increase. Programs originally smaller than 4,032 bytes will become 4,032 bytes after infection. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. Text strings which naturally occur in programs compiled with the Borland Pascal compiler will also occur in this virus, there are no unique text strings for this virus. Programs infected with Over-4032 will not function properly, and may display the following message when they are executed: "File not found"