Rage Virus

Virus Name: Rage Aliases: V Status: Rare Discovery: November, 1991 Symptoms: .COM file growth; message Origin: Canada Eff Length: 575 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, Sweep, AVTK, F-Prot, PCScan, NAV, IBMAV, NAVDX, VAlert, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Rage virus was received in November, 1991. Rage is from Canada, and one of the viruses which RABID appears to have written. This virus is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with Rage is executed, the virus will check the current drive and directory for an uninfected .COM file to infect. If one is found, other than very small .COM files, the Rage virus will infect it. Infected files increase in size by 575 bytes with the virus being located at the end of the infected file. There will be no change in the file's date/time in the DOS directory listing. The following text string can be found in infected files: "Patricia Boon" Programs infected with Rage will occassionally display the following message when they are executed: "Pray for death - RABID '91" This message cannot be found in infected files as it is encrypted within the viral code. It is unknown if Rage does anything besides replicate.