Virus Name: Rage
V Status: Rare
Discovery: November, 1991
Symptoms: .COM file growth; message
Eff Length: 575 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, Sweep, AVTK, F-Prot, PCScan,
NAV, IBMAV, NAVDX, VAlert, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: Delete infected files
The Rage virus was received in November, 1991. Rage is from
Canada, and one of the viruses which RABID appears to have written.
This virus is a non-resident, direct action infector of .COM
programs, including COMMAND.COM.
When a program infected with Rage is executed, the virus will check
the current drive and directory for an uninfected .COM file to
infect. If one is found, other than very small .COM files, the
Rage virus will infect it. Infected files increase in size by 575
bytes with the virus being located at the end of the infected file.
There will be no change in the file's date/time in the DOS directory
listing. The following text string can be found in infected files:
Programs infected with Rage will occassionally display the following
message when they are executed:
"Pray for death - RABID '91"
This message cannot be found in infected files as it is encrypted
within the viral code.
It is unknown if Rage does anything besides replicate.