Aurea Virus

Virus Name: Aurea Aliases: V Status: Rare Discovery: August, 1993 Symptoms: .COM file growth; message displayed; random sectors on system hard disk overwritten Origin: Italy Eff Length: 653 - 668 Bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, ViruScan, Sweep, AVTK, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, NProt, Sweep/N, AVTK/N, IBMAV/N, Innoc, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Aurea virus was submitted in August, 1993, and is from Italy. It is a non-resident, direct action infector of .COM programs, but not COMMAND.COM. When a program infected with the Aurea virus is executed, this virus will infect one .COM program located in the current directory. Infected programs will have a file length increase of 653 to 668 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the Aurea viral code: "*.COM C:\DOS\*.COM COMMAND." "I'm sorry, you lost something because of AUREA" The Aurea virus will occassionally randomly overwrite sectors of the system hard disk, and the following message may be displayed on the system monitor: "I'm sorry, you lost something because of AUREA"