Consumed Virus

Virus Name: Consumed Aliases: Consumed.380, Bailey.380 V Status: Viron Discovery: February, 1995 Symptoms: .COM file corruption; file date/time changes; message Origin: Unknown, but probably North America Eff Length: 380 Bytes Overwriting Type Code: ONCK - Overwriting Non-Resident .COM Infector Detection Method: F-Prot, NAV, AVTK, Sweep, IBMAV, ViruScan, NAVDX, VAlert, PCScan, ChAV, Sweep/N, AVTK/N, IBMAV/N, NShld, NAV/N, LProt, NProt, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Consumed virus was received in February, 1995. Its origin or point of isolation is unknown. Consumed is a non-resident, direct action infector of .COM files, including COMMAND.COM. It permanently corrupts the files it infects. When a program infected with the Consumed virus is executed, this virus will infect one .COM file located in the current directory. Programs infected with the Consumed virus will the first 380 bytes of the host program overwritten with the viral code. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are encrypted within the viral code: "*.COM [Consumed] v1.0" "Coded by Data Disruptor" "(c) 1993 RABID Development" "Purpose: Full Moon "Virus Lessons Part 1" taught by Admiral Bailey" "No host files found in this directory" Once the Consumed virus has infected all of the .COM files located in the current directory, it will display the following message on the system display: "[Consumed] v1.0 Coded by Data Disruptor (c) 1993 RABID Development Purpose: Full Moon "Virus Lessons Part 1" taught by Admiral Bailey No host files found in this directory"