Virus Name: Abal
V Status: New
Discovery: January, 1995
Symptoms: .COM file growth
Eff Length: 758 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, Sweep, NAV, NAVDX,
VAlert, PCScan, ViruScan, ChAV,
AVTK/N, IBMAV/N, Sweep/N, NProt, NAV/N, LProt,
Removal Instructions: Delete infected files
The Abal or Abal.758 virus was received in January, 1995. Its
origin or point of isolation is unknown. Abal is a non-resident
infector of .COM files, but not COMMAND.COM.
When a program infected with the Abal virus is executed, the virus
will infect one .COM file located in the current directory providing
that the current directory is not the root directory of the current
drive. It does not infect COMMAND.COM.
Programs infected with the Abal virus will have a file length
increase of 758 bytes with the virus being located at the beginning
of the file. The program's date and time in the DOS disk directory
listing will not be altered. The following text strings are visible
within the viral code in all infected programs:
"Not enough memory"
"ABAL - 758 (I)Virus"
It is unknown what the Abal virus may do besides replicate.