Hot Virus

Virus Name: Hot Aliases: Hot.130 V Status: Viron Discovered: July, 1994 Symptoms: .COM file corruption; file date/time changes; programs fail to function properly; execution of programs on diskette may hang system Origin: Unknown Eff Length: 130 Bytes OW Type Code: ONC - Non-Resident Overwriting .COM Infector Detection Method: F-Prot, AVTK, ViruScan, Sweep, NAV, NAVDX, VAlert, IBMAV, ChAV, Sweep/N, NProt, NShld, AVTK/N, NAV/N, IBMAV/N, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Hot virus was received in July, 1994. Its origin or point of isolation is unknown. Hot is a non-resident, direct action overwriting virus which infects .COM programs located on the C: drive. It does not infect COMMAND.COM. Attempts to execute infected programs from the system diskette drives may result in a system hang with the drive spinning. When a program infected with the Hot virus is executed, the Hot virus will infect one .COM file located in the current directory if that directory is located on the C: drive. Infected programs will have the first 130 bytes overwritten by the viral code, and the file's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code in all infected programs: "\ *.C*" "This is hot!" The Hot virus permanently corrupts the .COM programs it infects.