Adolf Hitler Virus

Virus Name: Adolf Hitler Aliases: Adolf V Status: Rare Discovery: December, 1992 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 475 Bytes Type Code: PR?CK - Parasitic Resident .COM Infector Detection Method: AVTK, IBMAV, Sweep, F-Prot, ViruScan, NAV, NAVDX, VAlert, PCScan, ChAV, Sweep/N, NShld, Innoc, NProt, AVTK/N, LProt, IBMAV/N, NAV/N Removal Instructions: Delete infected files General Comments: The Adolf Hitler, or Adolf, virus was submitted in December, 1992. Its origin or point of isolation is unknown. This virus has been named due to a text string which occurs in the virus. It should not be confused with the Adolph virus, there is no relationship between the two viruses. Adolf Hitler is a memory resident infector of .COM programs, including COMMAND.COM. When the first Adolf Hitler infected program is executed, this virus will install itself memory resident in a "hole" in low allocated system memory, hooking interrupt 21. Total system and available free memory, as indicated by the DOS CHKDSK program, will not be altered. Once the Adolf Hitler virus is memory resident, it will infect .COM programs, including COMMAND.COM, when they are executed. Infected programs will have a file length increase of 475 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text string is visible within the viral code in all Adolf Hitler infected programs: "Adolf Hitler"