Acid Virus

Virus Name: Acid Aliases: V Status: Viron Discovery: August, 1992 Symptoms: .COM & .EXE programs overwritten; programs fail to execute Origin: Unknown Eff Length: 792 Bytes Type Code: ONAK - Overwriting Non-Resident .COM & .EXE Infector Detection Method: F-Prot, ViruScan, NAV, NAVDX, AVTK, PCScan, ChAV, NShld, NProt, NAV/N, LProt, AVTK/N, Innoc Removal Instructions: Delete infected files General Comments: The Acid virus was submitted in August, 1992. Its origin or point of isolation is unknown. Acid is a non-resident, direct action overwriting virus which infects .COM and .EXE programs, including COMMAND.COM. When a program infected with the Acid virus is executed, this virus will infect all of the .EXE programs located in the current directory. Later, if an infected program is executed, it will start infecting the .COM programs in the current directory. Programs infected with the Acid virus will have had the first 792 bytes of the host program overwritten with the Acid virus' code. There will be no file length increase unless the original host program was smaller than 792 bytes, in which case it will become 792 bytes in length. The program's date and time in the DOS disk directory listing will not be altered. The following text strings can be found in all Acid infected programs: "*.EXE *.COM .." "Program too big to fit in memory" "Acid Virus" "Legalize ACiD and Pot" "By: Copyfright Corp-$MZU"