Virus Name: Sparkle
V Status: Rare
Discovered: July, 1994
Symptoms: .COM file growth
Eff Length: 705 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, Sweep, NAVDX,
VAlert, PCScan, ChAV,
Sweep/N, NShld, IBMAV/N, AVTK/N, NProt, NAV/N, Innoc 4.0+
Removal Instructions: Delete infected files
The Sparkle virus was received in July, 1994. Its origin or point of
isolation is unknown. Sparkle is a non-resident, direct action
infector of .COM programs, including COMMAND.COM.
When a program infected with the Sparkle virus is executed, this
virus will infect one .COM program located in the current directory.
Infected programs will have a file length increase of 705 bytes with
the virus being located at the end of the file. The program's date
and time in the DOS disk directory listing will not be altered. The
Following text strings are encrypted within the Sparkle viral code:
"Goodday.. I am da Sparkling Cyanide fear,"
"however, no need to vir.. 'coz"
"I do NOT have a bomb like al those childish fears."
"On da contrary.. I've set your date to tomorrow,"
"So all the other fears haven't got a chance.."
"Aren't you glad you ran me first?"
"SPARKLING CYANIDE (c) [VooDoo]"