Blood Lust Virus
Virus Name: Blood Lust
Aliases: Trivial-Blood Lust
V Status: Viron
Discovery: June, 1992
Symptoms: .COM files overwritten; program corruption; boot failures
Eff Length: 302 Bytes
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: AVTK, Sweep, ViruScan, IBMAV, F-Prot, NAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, Sweep/N, NProt, AVTK/N, LProt, NAV/N, IBMAV/N,
Removal Instructions: Delete infected files
The Blood Lust virus was submitted in June, 1992. It is originally
from Sweden. Blood Lust is a non-resident direct action infector
of .COM programs, including COMMAND.COM. It overwrites the
beginning of the programs it infects.
When a program infected with Blood Lust is executed, the Blood Lust
virus will infect all of the .COM programs located in the current
directory. If COMMAND.COM is located in this directory, it will
become infected. Programs infected with the Blood Lust virus will
have the first 302 bytes of the program overwritten by the viral
code. Unless the program was originally smaller than 302 bytes,
there will be no file length increase. Programs which were
originally smaller than 302 bytes will become 302 bytes in length.
There will be no change to the infected program's date and time
in the DOS disk directory listing.
The following text strings are encrypted within the Blood Lust
virus and are not visible within infected programs:
"Hi! This is the virus Blood Lust striking."
"Sorry to tell you, but your system is infected"
The above message may be displayed by the virus in some