Blood Lust Virus

 Virus Name:  Blood Lust 
 Aliases:     Trivial-Blood Lust 
 V Status:    Viron 
 Discovery:   June, 1992 
 Symptoms:    .COM files overwritten; program corruption; boot failures 
 Origin:      Sweden 
 Eff Length:  302 Bytes 
 Type Code:   ONCK - Overwriting Non-Resident .COM Infector 
 Detection Method:  AVTK, Sweep, ViruScan, IBMAV, F-Prot, NAV, 
                    NAVDX, VAlert, PCScan, ChAV, 
                    NShld, Sweep/N, NProt, AVTK/N, LProt, NAV/N, IBMAV/N, 
 Removal Instructions:  Delete infected files 
 General Comments: 
       The Blood Lust virus was submitted in June, 1992.  It is originally 
       from Sweden.  Blood Lust is a non-resident direct action infector 
       of .COM programs, including COMMAND.COM.  It overwrites the 
       beginning of the programs it infects. 
       When a program infected with Blood Lust is executed, the Blood Lust 
       virus will infect all of the .COM programs located in the current 
       directory.  If COMMAND.COM is located in this directory, it will 
       become infected.  Programs infected with the Blood Lust virus will 
       have the first 302 bytes of the program overwritten by the viral 
       code.  Unless the program was originally smaller than 302 bytes, 
       there will be no file length increase.  Programs which were 
       originally smaller than 302 bytes will become 302 bytes in length. 
       There will be no change to the infected program's date and time 
       in the DOS disk directory listing. 
       The following text strings are encrypted within the Blood Lust 
       virus and are not visible within infected programs: 
               "Hi! This is the virus Blood Lust striking." 
               "Sorry to tell you, but your system is infected" 
       The above message may be displayed by the virus in some 
       See:   Mini-45 

Show viruses from discovered during that infect .

Main Page