%%File: VIRS0512.TXT %%Name/Aliases: Lisbon, Vienna, Vienna 656, VHP related (?) %%Platform: PC/MS-DOS %%Type: Program., %%Disk Location: COM application., COMMAND.COM. %%Features: Memory resident; TSR. %%Damage: Corrupts a program or overlay files. %%Size: 648 bytes added to the end of the file. %%See Also: %%Notes: Vienna Virus strain. The time stamp of an infected file is changed: the seconds are set to 62 (= 2 * 1Fh). When infected file is executed, .COM-files in the current directory as well as in the directories in the DOS-PATH are extended by appending the viral code; no infection if the file size<10 or file size>64000 bytes. A selected .COM-file is infected by "random" IF (system seconds AND 58h) <> 0 ELSE damaged! A selected .COM-file is damaged permanently by overwriting the first five bytes by "@AIDS" Damaged applications Easy identification.: Last five bytes of file = "@AIDS" (Ascii) The time stamp of an infected file is changed: the seconds are set to 62 (= 2 * 1Fh). Replace damaged files.