Virus Name: Eliza
V Status: Rare
Discovered: December, 1991
Symptoms: .COM file growth
Eff Length: 1,193 - 1,194 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, NAV,
IBMAV, NAVDX, VAlert, PCScan, ChAV,
NShld, LProt, Sweep/N, Innoc, AVTK/N, NAV/N, IBMAV/N
Removal Instructions: Delete infected files
The Eliza virus was submitted in December, 1991. Its origin is
unknown. Eliza is a non-resident, direct action infector of
.COM files, including COMMAND.COM.
When a program infected with Eliza is executed, the virus may
infect one .COM file located in the current directory, though
it does not always do this. If COMMAND.COM is located in the
current directory, it may become infected.
Eliza infected programs have a file length increase of 1,193 or
1,194 bytes, with the virus being located at the beginning of the
infected program. COMMAND.COM, however, is an exception as it will
not have any file length increase. Infected programs will not have
had their file date and time in a DOS disk directory listing
The following text string can be found within the viral code in
Eliza infected programs:
"*.COM *.EXE *.* MJ"
It is unknown if Eliza does anything besides replicate.