Halloechen Virus

 Virus Name:  Halloechen 
 Aliases:     Hallo 
 V Status:    Rare 
 Discovered:  October, 1989 
 Symptoms:    TSR; .COM & .EXE growth; garbled keyboard input 
 Origin:      West Germany 
 Eff Length:  2,011 Bytes 
 Type Code:   PRsA - Resident Parasitic .COM &.EXE Infector 
 Detection Method:  ViruScan, AVTK, NAV, F-Prot, Sweep, 
                    IBMAV, NAVDX, VAlert, PCScan, ChAV, 
                    NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, 
                    NAV/N, IBMAV/N 
 Removal Instructions:  NAV, or delete infected files 
 General Comments: 
       The Halloechen virus was reported by Christoff Fischer of the 
       University of Karlsruhe in West Germany.  The virus is a memory 
       resident generic .COM & .EXE file infector which is reported to be 
       widespread in West Germany. 
       The Halloechen virus installs itself memory resident when the first 
       infected program is executed.  Thereafter, the virus will infect 
       any .EXE or .COM file which is run unless the resulting infected 
       file would be greater than 64K in size, or the file's date falls 
       within the system date's current month and year. Once a file has 
       been determined to be a candidate for infection, and is less than 
       approximately 62K in size as well as having a date outside of the 
       current month and year, it is infected. In the process of infecting 
       the file, the files size is first increased so that it is a multiple 
       of 16 (ends on a paragraph boundary), then the 2,011 bytes of viral 
       code are added. 
       When infected files are run, input from the keyboard is garbled. 

Show viruses from discovered during that infect .

Main Page