Paris Virus

Virus Name: Paris Aliases: V Status: Rare Discovery: August, 1990 Symptoms: .COM & .EXE file growth; slow program loads upon execution; diskette corruption after diskette boot Origin: Paris, France Eff Length: 4,909 Bytes Type Code: PNAK - Parasitic Non-Resident .COM & .EXE Infector Detection Method: ViruScan, NAV, AVTK, F-Prot, Sweep, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Paris virus was isolated in Paris, France, in early August, 1990. This virus is a generic infector of .COM, .EXE and overlay files, and will infect COMMAND.COM. It is not memory-resident. When a program infected with the Paris virus is executed, the virus will infect all .COM, .EXE and overlay files on the current drive and directory, with the exception of very small .COM files. It will also check to see if COMMAND.COM on the C: drive is uninfected, if it has not previously been infected it will become infected. Infected files will increase in length by between 4,909 - 4,925 bytes, with the virus located at the end of the infected file. The Paris virus can be destructive in some instances, resulting in diskettes becoming corrupted if the system is booted from a diskette with a Paris infected COMMAND.COM program.