Tease Virus

Virus Name: Tease Aliases: Tease.840 V Status: New Discovered: January, 1996 Symptoms: .COM file growth Origin: Sweden Eff Length: 840 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ChAV, AVTK, IBMAV, ViruScan, NAV, NAVDX, Innoc, AVTK/N, IBMAV/N, NShld, NAV/N Removal Instructions: Delete infected files General Comments: The Tease or Tease.840 virus was received in January, 1996, and appears to be from Sweden. Tease is a non-resident, direct action infector of .COM files, including COMMAND.COM. It only infects files on the system hard disk, not diskette drives. When a program infected with the Tease virus is executed on the system hard disk, this virus will infect all of the previously uninfected .COM files located in the current directory, as well as the drive's root directory and the C:\DOS directory. Programs infected with this virus will have a file length increase of 840 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the viral code: "This virus is a direct-action infector of .com files that will search for files" "to infect in the current, DOS and in any directories below this. If it find an" "un-infected com file it will be infected, though still work as before. The virus" "is freeware, and you are allowed and even encouraged to copy it to your friends" "The Tea, Toasts and Tittles virus v1.00Made in Sweden 1994" "*.COM .. \dos"