Sparkle Virus

Virus Name: Sparkle Aliases: V Status: Rare Discovered: July, 1994 Symptoms: .COM file growth Origin: Unknown Eff Length: 705 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, Sweep, NAVDX, VAlert, PCScan, ChAV, Sweep/N, NShld, IBMAV/N, AVTK/N, NProt, NAV/N, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Sparkle virus was received in July, 1994. Its origin or point of isolation is unknown. Sparkle is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Sparkle virus is executed, this virus will infect one .COM program located in the current directory. Infected programs will have a file length increase of 705 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The Following text strings are encrypted within the Sparkle viral code: "*.COM" "Goodday.. I am da Sparkling Cyanide fear," "however, no need to vir.. 'coz" "I do NOT have a bomb like al those childish fears." "On da contrary.. I've set your date to tomorrow," "So all the other fears haven't got a chance.." "Aren't you glad you ran me first?" "SPARKLING CYANIDE (c) [VooDoo]"