Virus Name: Consumed
Aliases: Consumed.380, Bailey.380
V Status: Viron
Discovery: February, 1995
Symptoms: .COM file corruption; file date/time changes; message
Origin: Unknown, but probably North America
Eff Length: 380 Bytes Overwriting
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: F-Prot, NAV, AVTK, Sweep, IBMAV, ViruScan,
NAVDX, VAlert, PCScan, ChAV,
Sweep/N, AVTK/N, IBMAV/N, NShld, NAV/N, LProt, NProt,
Removal Instructions: Delete infected files
The Consumed virus was received in February, 1995. Its origin or
point of isolation is unknown. Consumed is a non-resident, direct
action infector of .COM files, including COMMAND.COM. It permanently
corrupts the files it infects.
When a program infected with the Consumed virus is executed, this
virus will infect one .COM file located in the current directory.
Programs infected with the Consumed virus will the first 380 bytes
of the host program overwritten with the viral code. The program's
date and time in the DOS disk directory listing will have been
updated to the current system date and time when infection occurred.
The following text strings are encrypted within the viral code:
"*.COM [Consumed] v1.0"
"Coded by Data Disruptor"
"(c) 1993 RABID Development"
"Purpose: Full Moon "Virus Lessons Part 1" taught by
"No host files found in this directory"
Once the Consumed virus has infected all of the .COM files located
in the current directory, it will display the following message
on the system display:
Coded by Data Disruptor
(c) 1993 RABID Development
Purpose: Full Moon "Virus Lessons Part 1" taught by Admiral Bailey
No host files found in this directory"