Were Here Virus
Virus Name: Were Here
Aliases: Here
V Status: Rare
Discovered: December, 1991
Symptoms: .COM file growth; message
Origin: Unknown / Europe
Eff Length: 838 - 851 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: AVTK, ViruScan, F-Prot, Sweep, NAVDX,
NAV, IBMAV, VAlert, PCScan, ChAV,
NShld, Sweep/N, LProt, Innoc, NProt, AVTK/N, IBMAV/N,
NAV/N
Removal Instructions: Delete infected files
General Comments:
The Were Here virus was discovered in Europe in December, 1991. It
is a non-resident direct action infector of .COM programs, including
COMMAND.COM.
When a program infected with Were Here is executed, the virus will
infect one .COM program located in the current directory. If
COMMAND.COM resides in this directory, it may become infected.
Programs infected with Were Here will have a file length increase
of 838 to 851 bytes with the virus being located at the end of the
infected file. The program's date and time in the DOS disk directory
will not have been altered.
The Were Here virus contains code to display the text "We're Here"
when an infected program is executed starting in 1992. This text
is not, however, always displayed.