Over-4032 Virus

 Virus Name:  Over-4032 
 Aliases:     Pascal-4032 
 V Status:    Viron 
 Discovered:  June, 1993 
 Symptoms:    .EXE files overwritten; file date/time changes; programs fail 
              to function properly; "File not found" message 
 Origin:      Unknown 
 Eff Length:  4,032 Bytes Overwriting 
 Type Code:   ONE - Overwriting Non-Resident .EXE Infector 
 Detection Method:  F-Prot, AVTK, Sweep, IBMAV, ViruScan, NAVDX, 
                    NAV, VAlert, PCScan, ChAV, 
                    AVTK/N, Sweep/N, NShld, NProt, IBMAV/N, Innoc, NAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Over-4032 or Pascal-4032 virus was received in June, 1993.  Its 
       origin or point of isolation is unknown.  Over-4032 is a non- 
       resident overwriting virus which infects .EXE programs.  It 
       permanently corrupts the programs it infects. 
       When a program infected with the Over-4032 virus is executed, this 
       virus will infect one previously infected .EXE program located in 
       the current directory.  Infected programs will have the first 4,032 
       bytes of the host program overwritten by the virus.  Unless the 
       virus was originally smaller than 4,032 bytes, there will be no 
       file length increase.  Programs originally smaller than 4,032 bytes 
       will become 4,032 bytes after infection.  The program's date and 
       time in the DOS disk directory listing will have been updated to the 
       current system date and time when infection occurred.  Text strings 
       which naturally occur in programs compiled with the Borland Pascal 
       compiler will also occur in this virus, there are no unique text 
       strings for this virus. 
       Programs infected with Over-4032 will not function properly, and 
       may display the following message when they are executed: 
               "File not found" 

Show viruses from discovered during that infect .

Main Page