Sabbath Virus

Virus Name: Sabbath Aliases: V Status: Rare Discovery: August, 1993 Symptoms: .COM file growth; system hangs Origin: Unknown Eff Length: 1,684 Bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: NAV, NAVDX, VAlert, ViruScan, NAV/N, NShld Removal Instructions: Delete infected files General Comments: The Sabbath virus was received in August, 1993. Its origin or point of isolation is unknown. Sabbath is a non-resident, direct action infector of .COM programs, but not COMMAND.COM. When a program infected with the Sabbath virus is executed, this virus will infect one .COM program located in the current directory. Infected programs will have a file length increase of 1,684 bytes with the virus being located at the end of the file. The file's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the Sabbath viral code: "[Sabbath Virus] 1993 By Havoc The Chaos of Trinity" "Sucks To Be You Pal!" "Your Computer Infected With The Sabbath Virus - Trinity!" "Dedicated To Heaven In Black (He's Excited By This!)" "*.COM .." System hangs frequently occur when infected programs are executed.