Accept Virus


 Virus Name:  Accept 
 Aliases:     Accept.3619 
 V Status:    Rare 
 Discovery:   July, 1994 
 Symptoms:    .COM & .EXE file growth; TSR 
 Origin:      Unknown 
 Eff Length:  3,619 Bytes 
 Type Code:   PRsA - Parasitic Resident .COM & .EXE Infector 
 Detection Method:  F-Prot, AVTK, IBMAV, ViruScan, Sweep, 
                    NAVDX, VAlert, NAV, PCScan, ChAV, 
                    AVTK/N, Sweep/N, IBMAV/N, NShld, NProt, NAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Accept, or Accept.3619, virus was received in July, 1994.  Its 
       origin or point of isolation is unknown.  Accept is a memory resident 
       infector of .COM and .EXE programs, but not COMMAND.COM. 
 
       When the first Accept infected program is executed, this virus 
       will install itself as a low system memory TSR of 8,160 bytes, 
       hooking interrupts 21 and 7E.  Once memory resident, it will infect 
       all of the .COM and .EXE programs in the current directory when any 
       program is executed. 
 
       Programs infected with the Accept virus will have a file length 
       increase of 3,619 bytes with the virus being located at the end of the 
       file.  The program's date and time in the DOS disk directory listing 
       will not be altered.  The following text string is encrypted within 
       the Accept viral code: 
 
               "ME PERDI A ACCEPT, SOY UN PELOTUDO" 
 
       It is unknown what Accept does besides replicate. 
 
       Known variant(s) of Accept are: 
       Accept.3773: Received in July, 1996, this variant is "in the 
           wild".  Its memory resident TSR is 8,272 bytes, hooking 
           interrupts 21 and 7E.  Once resident, it will infect between 
           four and six .COM and/or .EXE files located in the current 
           directory when a program is executed.  Infected programs will 
           have a file length increase of 3,773 bytes with the virus being 
           located at the end of the file.  The program's date and time in 
           the DOS disk directory listing will not be altered.  The 
           following text strings are encrypted within the viral code: 
           "ME PERDI A ACCEPT, SOY UN PELOTUDO=" 
           "*.COM *.EXE COMMANDSCANCLEANNAVCPAVBOOTSAFEVSAFEIBMAVSHVGUARD 
            VIRTESTVCAREDAILYDISKPART" 
            Origin:  Unknown  July, 1996. 

Show viruses from discovered during that infect .

Main Page