Virus Name: Tease
V Status: New
Discovered: January, 1996
Symptoms: .COM file growth
Eff Length: 840 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ChAV, AVTK, IBMAV, ViruScan, NAV, NAVDX,
Innoc, AVTK/N, IBMAV/N, NShld, NAV/N
Removal Instructions: Delete infected files
The Tease or Tease.840 virus was received in January, 1996, and
appears to be from Sweden. Tease is a non-resident, direct
action infector of .COM files, including COMMAND.COM. It only
infects files on the system hard disk, not diskette drives.
When a program infected with the Tease virus is executed on the
system hard disk, this virus will infect all of the previously
uninfected .COM files located in the current directory, as well
as the drive's root directory and the C:\DOS directory.
Programs infected with this virus will have a file length
increase of 840 bytes with the virus being located at the end of
the file. The program's date and time in the DOS disk directory
listing will not be altered. The following text strings are
encrypted within the viral code:
"This virus is a direct-action infector of .com files that will
search for files"
"to infect in the current, DOS and in any directories below
this. If it find an"
"un-infected com file it will be infected, though still work
as before. The virus"
"is freeware, and you are allowed and even encouraged to copy
it to your friends"
"The Tea, Toasts and Tittles virus v1.00Made in Sweden 1994"
"*.COM .. \dos"