Virus Name: Hastings
V Status: Viron
Discovered: December, 1991
Symptoms: .COM files altered; file date/time changes; .COM files no
Eff Length: 200 Bytes
Type Code: ONCK - Non-Resident Overwriting .COM Infector
Detection Method: ViruScan, AVTK, F-Prot, Sweep, ChAV,
IBMAV, NAV, NAVDX, VAlert, PCScan,
NShld, Sweep/N, Innoc, NProt, AVTK/N, LProt, IBMAV/N,
Removal Instructions: Delete infected files
The Hastings virus was isolated in the United States in December,
1991. Hastings is a non-resident, direct action overwriting
infector of the first .COM file in a directory. It may infect
When a program infected with Hastings is executed, the virus will
find the first .COM file in the current directory. If this file
has not been previously infected by the Hastings virus, it will
infect it. Hastings infected .COM files will have the first 200
bytes of the host program overwritten with the viral code. The
file will not have a file length change unless the original file
was smaller than 200 bytes, in which case the length will become
200 bytes. The file's date and time in the DOS disk directory
will have been updated to the current system date and time when
The following text strings can be found within the viral code in
programs infected with Hastings:
"AKA Nick Haflinger... Zopy me I want to travel"
"I can now program in assembler"
"This program was written in the town of Hastings hehehehe!"
The Hastings virus does not do anything besides replicating and
destroying those programs which it infects.