VHP2 Virus

Virus Name: VHP2 Aliases: 623, VHP-623, VHP-2 V Status: Research Discovered: March, 1990 Symptoms: .COM growth; reboots or system hangs Origin: Bulgaria Eff Length: 623 bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, F-Prot, NAV, Sweep, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: F-Prot, or delete infected files General Comments: The VHP2 virus was isolated in Bulgaria in March, 1990. This virus is based on the Vienna virus, and has many of the same characteristics of the VHP-435 variant of the VHP virus. It's major difference is that of effective length, and that 1 of every 8 infected programs will perform a warm system reboot. VHP2 is 623 bytes long, infecting only .COM files but not COMMAND.COM. Known variant(s) of VHP2 are: VHP-627: Similar to VHP-623, except that its length is 627 bytes. See: VHP Vienna