Eliza Virus


 Virus Name:  Eliza 
 Aliases:    
 V Status:    Rare 
 Discovered:  December, 1991 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  1,193 - 1,194 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  ViruScan, AVTK, F-Prot, Sweep, NAV, 
                    IBMAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, AVTK/N, NAV/N, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Eliza virus was submitted in December, 1991.  Its origin is 
       unknown.  Eliza is a non-resident, direct action infector of 
       .COM files, including COMMAND.COM. 
 
       When a program infected with Eliza is executed, the virus may 
       infect one .COM file located in the current directory, though 
       it does not always do this.  If COMMAND.COM is located in the 
       current directory, it may become infected. 
 
       Eliza infected programs have a file length increase of 1,193 or 
       1,194 bytes, with the virus being located at the beginning of the 
       infected program.  COMMAND.COM, however, is an exception as it will 
       not have any file length increase.  Infected programs will not have 
       had their file date and time in a DOS disk directory listing 
       altered. 
 
       The following text string can be found within the viral code in 
       Eliza infected programs: 
 
               "*.COM *.EXE *.* MJ" 
 
       It is unknown if Eliza does anything besides replicate. 

Show viruses from discovered during that infect .

Main Page