Virus Name: Fission
V Status: New
Discovered: January, 1995
Symptoms: .COM, .EXE, .BAT file growth;
.BAT files fail to function;
decrease in total available free memory
Eff Length: 517 Bytes
Type Code: PRhA - Parasitic Resident .COM, .EXE, .BAT Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAVDX, VAlert,
NAV, PCScan, ChAV,
AVTK/N, IBMAV/N, NShld, Sweep/N, NProt, NAV/N, LProt,
Removal Instructions: Delete infected files
The Fission virus was received in January, 1995. Its origin or
point of isolation is unknown. Fission is a memory resident
infector of .COM, .EXE, and .BAT files. It does not infect
When the first Fission infected program is executed, this virus
will become memory resident at the top of system memory but below
the 640K DOS boundary, hooking interrupt 21. Total available
memory, as indicated by the DOS 5.0 CHKDSK program, will have
decreased by approximately 800 bytes.
Once the Fission virus is memory resident, it will infect .COM,
.EXE, and .BAT files, but not COMMAND.COM, when they are executed.
Infected files will have a file length increase of 517 bytes with
the virus being located at the end of the file. The file's date
and time in the DOS disk directory listing will not be altered.
The following text string is visible within the viral code in
all Fission infected files:
"[Binary Fission] v1.0 [MS/PS]"
.BAT files will fail to function properly once they have been
infected by the Fission virus.