Abal Virus

Virus Name: Abal Aliases: Abal.758 V Status: New Discovery: January, 1995 Symptoms: .COM file growth Origin: Unknown Eff Length: 758 Bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, Sweep, NAV, NAVDX, VAlert, PCScan, ViruScan, ChAV, AVTK/N, IBMAV/N, Sweep/N, NProt, NAV/N, LProt, NShld, Innoc Removal Instructions: Delete infected files General Comments: The Abal or Abal.758 virus was received in January, 1995. Its origin or point of isolation is unknown. Abal is a non-resident infector of .COM files, but not COMMAND.COM. When a program infected with the Abal virus is executed, the virus will infect one .COM file located in the current directory providing that the current directory is not the root directory of the current drive. It does not infect COMMAND.COM. Programs infected with the Abal virus will have a file length increase of 758 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are visible within the viral code in all infected programs: "*.com" "????????COM" "\ .." "Not enough memory" "ABAL - 758 (I)Virus" It is unknown what the Abal virus may do besides replicate.