Virus Name: Democracy
V Status: Rare
Discovered: December, 1993
Symptoms: .COM & .EXE growth; TSR; DOS DIR command output slowed/sluggish
Eff Length: 3,959 - 3,973 Bytes
Type Code: PRsA - Parasitic Resident .COM & .EXE Infector
Detection Method: F-Prot, ViruScan, Sweep, AVTK, ChAV,
NAVDX, VAlert, NAV, PCScan,
Sweep/N, NShld, AVTK/N, Innoc, NAV/N
Removal Instructions: Delete infected programs
The Democracy virus was received in December, 1993. Its origin
or point of original isolation is unknown. Democracy is a memory
resident infector of .COM and .EXE programs, but not COMMAND.COM.
When the first Democracy infected program is executed, this virus
will install itself memory resident as a low system memory TSR of
4,192 bytes. It will have hooked interrupts 01, 03 and 22.
Once the Democracy virus is memory resident, it will infect .COM and
.EXE programs larger than approximately 10K when they are executed.
Infected programs will have a file length increase of 3,959 to 3,973
bytes with the virus being located at the end of the file. The file's
date and time in the DOS disk directory listing will not have been
altered. The following text string can be found at the very end of
all Democracy infected files:
Users of systems infected with the Democracy virus may experience
slow or sluggish response to the DOS DIR command. It is unknown
what else this virus may do besides replicate.