Sveta Virus
Virus Name: Sveta
Aliases: Sveta.309
V Status: New
Discovered: July, 1995
Symptoms: .COM file growth; file date/time changes
Origin: Unknown
Eff Length: 309 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, VAlert, NAV, NAVDX, Sweep, ViruScan,
IBMAV, PCScan, ChAV,
AVTK/N, Sweep/N, NShld, NAV/N, IBMAV/N, Innoc 4.0+
Removal Instructions: Delete infected programs
General Comments:
The Sveta virus was received in July, 1995. Its origin or point of
isolation is unknown. Sveta is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a program infected with the Sveta virus is executed, this
virus will infect all of the previously uninfected .COM files in
the current directory. Infected programs will have a file length
increase of 309 bytes with the virus being located at the beginning
of the file. The program's date and time in the DOS disk directory
listing will have been updated to the current system date and time
when infection occurred. The following text strings are visible
within the viral code in all infected files:
"*.com"
"Sveta"