Breaking Virus
Virus Name: Breaking
Aliases: Breaking.1000
V Status: Rare
Discovery: October, 1994
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 1,000 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, ViruScan, AVTK, Sweep, NAV, IBMAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, AVTK/N, Sweep/N, NAV/N, IBMAV/N, NProt,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Breaking virus was received in October, 1994. Its origin or
point of isolation is unknown. Breaking is a non-resident, direct
action infector of .COM files, including COMMAND.COM.
When a program infected with the Breaking virus is executed, this
virus will infect all of the .COM files located in the current
directory. Infected .COM files will have a file length increase of
1,000 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not be
altered. The following text strings can be found within the viral
code in all Breaking infected programs:
"*.COM"
"1991"
It is unknown what Breaking does besides replicate.
Known variant(s) of Breaking are:
Breaking.1000.B: Received in July, 1995, Breaking.1000.B is a
1,000 byte minor variant of the Breaking virus described above.
Origin: Unknown July, 1995.