%%File: VIRS0525.TXT %%Name/Aliases: Macho, MachoSoft, 3555, 3551 %%Platform: PC/MS-DOS %%Type: Program., Encrypted/Stealth The virus actively hides., %%Disk Location: COM application., EXE application., COMMAND.COM. %%Features: Encrypted, Direct acting. %%Damage: Corrupts a program or overlay files., Corrupts a data file. %%Size: 3550-3560 bytes are appended on a paragraph boundary %%See Also: %%Notes: Spreads between .COM and .EXE files. It scans through data on the hard disk, changing the string "Microsoft" (in any mixture of upper and lower case) to "MACHOSOFT". If the environment variable "VIRUS=OFF" is set, the virus will not infect. Use this as a temporary protection. Microsoft changes to MACHOSOFT Search for the string: 50,51,56,BE,59,00,B9,26,08,90,D1,E9,8A,E1,8A,C1,33,06,14,00,31,04,46,46, E2,F2,5E,59