Meditation Virus


 Virus Name:  Meditation 
 Aliases:     Guru 
 V Status:    Rare 
 Discovered:  November, 1992 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  299 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  Sweep, AVTK, F-Prot, ViruScan, IBMAV, NAVDX, 
                    NAV, VAlert, PCScan, ChAV, 
                    Sweep/N, NShld, Innoc, AVTK/N, NAV/N, IBMAV/N, LProt 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Meditation virus was received in November, 1992.  Its origin or 
       point of isolation is unknown.  Meditation is a non-resident, direct 
       action infector of .COM programs, including COMMAND.COM. 
 
       When a program infected with the Meditation virus is executed, the 
       Meditation virus will infect all of the .COM programs located in the 
       current directory.  Infected programs will have a file length 
       increase of 299 bytes with the virus being located at the beginning 
       of the file.  The program's date and time in the DOS disk directory 
       listing will not be altered.  The following text strings are visible 
       within the viral code in all Meditation infected programs: 
 
               "*.COM" 
               "Software Failure. Task Held. 
                Guru Meditation #456789:#34567?????" 
 
       It is unknown what Meditation does besides replicate. 
 
       Known variant(s) of Mediation are: 
       Meditation-B: Functionally similar to the original Meditation 
                     virus, this variant has one byte which differs. 
                     Origin:  Unknown  December, 1992. 

Show viruses from discovered during that infect .

Main Page