Virus Name: Accept
V Status: Rare
Discovery: July, 1994
Symptoms: .COM & .EXE file growth; TSR
Eff Length: 3,619 Bytes
Type Code: PRsA - Parasitic Resident .COM & .EXE Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep,
NAVDX, VAlert, NAV, PCScan, ChAV,
AVTK/N, Sweep/N, IBMAV/N, NShld, NProt, NAV/N, Innoc
Removal Instructions: Delete infected files
The Accept, or Accept.3619, virus was received in July, 1994. Its
origin or point of isolation is unknown. Accept is a memory resident
infector of .COM and .EXE programs, but not COMMAND.COM.
When the first Accept infected program is executed, this virus
will install itself as a low system memory TSR of 8,160 bytes,
hooking interrupts 21 and 7E. Once memory resident, it will infect
all of the .COM and .EXE programs in the current directory when any
program is executed.
Programs infected with the Accept virus will have a file length
increase of 3,619 bytes with the virus being located at the end of the
file. The program's date and time in the DOS disk directory listing
will not be altered. The following text string is encrypted within
the Accept viral code:
"ME PERDI A ACCEPT, SOY UN PELOTUDO"
It is unknown what Accept does besides replicate.
Known variant(s) of Accept are:
Accept.3773: Received in July, 1996, this variant is "in the
wild". Its memory resident TSR is 8,272 bytes, hooking
interrupts 21 and 7E. Once resident, it will infect between
four and six .COM and/or .EXE files located in the current
directory when a program is executed. Infected programs will
have a file length increase of 3,773 bytes with the virus being
located at the end of the file. The program's date and time in
the DOS disk directory listing will not be altered. The
following text strings are encrypted within the viral code:
"ME PERDI A ACCEPT, SOY UN PELOTUDO="
"*.COM *.EXE COMMANDSCANCLEANNAVCPAVBOOTSAFEVSAFEIBMAVSHVGUARD
Origin: Unknown July, 1996.