Blood Lust Virus

Virus Name: Blood Lust Aliases: Trivial-Blood Lust V Status: Viron Discovery: June, 1992 Symptoms: .COM files overwritten; program corruption; boot failures Origin: Sweden Eff Length: 302 Bytes Type Code: ONCK - Overwriting Non-Resident .COM Infector Detection Method: AVTK, Sweep, ViruScan, IBMAV, F-Prot, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Sweep/N, NProt, AVTK/N, LProt, NAV/N, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Blood Lust virus was submitted in June, 1992. It is originally from Sweden. Blood Lust is a non-resident direct action infector of .COM programs, including COMMAND.COM. It overwrites the beginning of the programs it infects. When a program infected with Blood Lust is executed, the Blood Lust virus will infect all of the .COM programs located in the current directory. If COMMAND.COM is located in this directory, it will become infected. Programs infected with the Blood Lust virus will have the first 302 bytes of the program overwritten by the viral code. Unless the program was originally smaller than 302 bytes, there will be no file length increase. Programs which were originally smaller than 302 bytes will become 302 bytes in length. There will be no change to the infected program's date and time in the DOS disk directory listing. The following text strings are encrypted within the Blood Lust virus and are not visible within infected programs: "*.C*" "Hi! This is the virus Blood Lust striking." "Sorry to tell you, but your system is infected" The above message may be displayed by the virus in some circumstances. See: Mini-45