Death Dragon Virus

Virus Name: Death Dragon Aliases: Eddy'93 V Status: Rare Discovered: November, 1993 Symptoms: .COM file growth; file date/time changes; message Origin: Republic Of South Africa Eff Length: 528 bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, ViruScan, NAV, NAVDX, AVTK, IBMAV 2.41D+, ChAV, NProt, AVTK/N, NShld, NAV/N, IBMAV/N 2.41D+ Removal Instructions: Delete infected files General Comments: The Death Dragon, or Eddy'93, virus was received in November, 1993. It is originally from the Republic Of South Africa, where it was uploaded to at least one bulletin board system (BBS). Death Dragon is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Death Dragon virus is executed, this virus will infect all of the .COM files located in the current directory. Infected programs will have a file length increase of 528 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code in all Death Dragon infected programs: "[DEATH DRAGON]" "@echo off" "echo Fuck you, arsehole! You are a SHITTY user and" "echo I hate you!" "echo." "pause" "Eddie has returned on tour (1993) - VMAG version" "press a key..." "*.com c:\autoexec.bat" "????????COM" In April of any year, execution of an infected program will result in the following message being displayed on the system monitor: "Eddie has returned on tour (1993) - VMAG version"