Virus Name: Sabbath
V Status: Rare
Discovery: August, 1993
Symptoms: .COM file growth; system hangs
Eff Length: 1,684 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: NAV, NAVDX, VAlert, ViruScan,
Removal Instructions: Delete infected files
The Sabbath virus was received in August, 1993. Its origin or
point of isolation is unknown. Sabbath is a non-resident, direct
action infector of .COM programs, but not COMMAND.COM.
When a program infected with the Sabbath virus is executed, this
virus will infect one .COM program located in the current directory.
Infected programs will have a file length increase of 1,684 bytes
with the virus being located at the end of the file. The file's
date and time in the DOS disk directory listing will not be altered.
The following text strings are encrypted within the Sabbath viral
"[Sabbath Virus] 1993 By Havoc The Chaos of Trinity"
"Sucks To Be You Pal!"
"Your Computer Infected With The Sabbath Virus - Trinity!"
"Dedicated To Heaven In Black (He's Excited By This!)"
System hangs frequently occur when infected programs are executed.