Blood Sugar Virus
Virus Name: Blood Sugar
Aliases:
V Status: Rare
Discovery: February, 1994
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 416 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, IBMAV, AVTK, ViruScan, Sweep, NAV,
NAVDX, VAlert, PCScan, ChAV,
NProt, AVTK/N, Sweep/N, IBMAV/N, NShld, NAV/N, LProt,
Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Blood Sugar virus was received in February, 1994. It's origin or
point of isolation is unknown. This virus is a memory resident direct
action infector of .COM programs, including COMMAND.COM.
When a program infected with Blood Sugar is executed, the Blood Sugar
virus will infect all of the .COM programs located in the current
directory. If COMMAND.COM is located in this directory, it will
become infected. Infected programs will have a file length increase
of 416 bytes with the virus being located at the end of the file.
The program's date and time in the DOS disk directory listing will
not be altered. The following text strings are encrypted within the
viral code:
"*.COM"
"[C6H1206] $ Blood Sugar by MnemoniX"