Meditation Virus

Virus Name: Meditation Aliases: Guru V Status: Rare Discovered: November, 1992 Symptoms: .COM file growth Origin: Unknown Eff Length: 299 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: Sweep, AVTK, F-Prot, ViruScan, IBMAV, NAVDX, NAV, VAlert, PCScan, ChAV, Sweep/N, NShld, Innoc, AVTK/N, NAV/N, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The Meditation virus was received in November, 1992. Its origin or point of isolation is unknown. Meditation is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Meditation virus is executed, the Meditation virus will infect all of the .COM programs located in the current directory. Infected programs will have a file length increase of 299 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are visible within the viral code in all Meditation infected programs: "*.COM" "Software Failure. Task Held. Guru Meditation #456789:#34567?????" It is unknown what Meditation does besides replicate. Known variant(s) of Mediation are: Meditation-B: Functionally similar to the original Meditation virus, this variant has one byte which differs. Origin: Unknown December, 1992.