Suriv 3.00 Virus

Virus Name: Suriv 3.00 Aliases: Israeli, Suriv03, Suriv B V Status: Extinct Discovered: 1988 Symptoms: TSR; .COM, .EXE, & .SYS growth; black window; system slowdown Origin: Israel Eff Length: 1,813 (COM files) & 1,808 (EXE files) bytes Type Code: PRsA - Parasitic Resident .COM & .EXE Infector Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: F-Prot, or delete infected files General Comments: May be a variant of the Jerusalem virus. The string "sUMsDos" has been changed to "sURIV 3.00". The Suriv 3.00 virus activates on Friday the 13th when an infected program is run or if it is already present in system memory, however files are not deleted due to a bug in the viral code. Other than on Friday the 13th, after the virus is memory resident for 30 seconds, an area of the screen is turned into a "black window" and a time wasting loop is executed with each timer interrupt. As with the Jerusalem viruses, this virus can also infect overlay, . SYS, and other executable files besides .EXE and .COM files, though it does not infect COMMAND.COM itself. See: Jerusalem