Virus Name: Acid
V Status: Viron
Discovery: August, 1992
Symptoms: .COM & .EXE programs overwritten; programs fail to execute
Eff Length: 792 Bytes
Type Code: ONAK - Overwriting Non-Resident .COM & .EXE Infector
Detection Method: F-Prot, ViruScan, NAV, NAVDX, AVTK, PCScan, ChAV,
NShld, NProt, NAV/N, LProt, AVTK/N, Innoc
Removal Instructions: Delete infected files
The Acid virus was submitted in August, 1992. Its origin or point
of isolation is unknown. Acid is a non-resident, direct action
overwriting virus which infects .COM and .EXE programs, including
When a program infected with the Acid virus is executed, this virus
will infect all of the .EXE programs located in the current
directory. Later, if an infected program is executed, it will
start infecting the .COM programs in the current directory.
Programs infected with the Acid virus will have had the first 792
bytes of the host program overwritten with the Acid virus' code.
There will be no file length increase unless the original host
program was smaller than 792 bytes, in which case it will become
792 bytes in length. The program's date and time in the DOS
disk directory listing will not be altered. The following
text strings can be found in all Acid infected programs:
"*.EXE *.COM .."
"Program too big to fit in memory"
"Legalize ACiD and Pot"
"By: Copyfright Corp-$MZU"