Virus Name: Anti-DAF
V Status: Rare
Discovery: March, 1993
Symptoms: .COM file growth
Origin: The Netherlands
Eff Length: 561 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: Sweep, AVTK, F-Prot, ViruScan, IBMAV,
NAV, NAVDX, VAlert, PCScan, ChAV,
Sweep/N, NShld, AVTK/N, LProt, NProt, NAV/N, Innoc,
Removal Instructions: Delete infected files
The Anti-DAF virus was submitted in March, 1993, and is from The
Netherlands. Anti-DAF is a non-resident, direct action infector
of .COM programs, including COMMAND.COM.
When a program infected with the Anti-DAF virus is executed, this
virus will infect one .COM program located in the current directory.
Infected programs will have a file length increase of 561 bytes
with the virus being located at the end of the file. The program's
date and time in the DOS disk directory listing will not be altered.
The following text strings are encrypted within the Anti-DAF viral
"The Anti-DAF virus"
"Hugo vd Goeslaan 1"
"5600 PR Eindhoven, The Netherlands"
"(c) 1992 Dark Helmet + The Virus Research Centre"
The company name and individual mentioned above, along with the
address, are not associated with the creation of this virus.