A very simple virus from Natal in South-Africa. It was written by a student, who claims to have no knowledge of how it "escaped". This virus, just like Kennedy, will only infect .COM files starting with a JMP statement (E9). Infected programs may occasionally display the following message when they are executed.
File infected by BLOOD VIRUS version 1.20
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
More scanning & removal options
More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
This variant does not really exist, as the only available sample is the result of an error in transmission between two virus researchers.