Sadist Virus

Virus Name: Sadist Aliases: V Status: Rare Discovery: January, 1992 Symptoms: .EXE file growth; unexpected warm reboots of system Origin: Unknown Eff Length: 1,436 - 1,450 Bytes Type Code: PNE - Parasitic Non-Resident .EXE Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Sadist virus was received in January, 1992. Its origin or point of original isolation is unknown. Sadist is a non-resident, direct action infector of .EXE programs. When a program infected with the Sadist virus is executed, the Sadist virus will search the current directory and infect up to three previously uninfected .EXE programs. Once the programs have been infected, a warm reboot may occur, or the host program may execute properly. Programs infected with the Sadist virus will have a file length increase of 1,436 to 1,450 bytes with the virus being located at the end of the infected program. The file's date and time in the DOS disk directory listing will not have been altered. The following text string can be found within the viral code in all Sadist infected programs: "CopyRight by Vadim V.N.1989"