House Virus

Virus Name: House Aliases: V Status: Rare Discovered: December, 1992 Symptoms: .EXE file corruption; programs fail to execute properly; unexpected access to A: and B: drives Origin: Unknown Eff Length: 11,636 Bytes OW Type Code: ONE - Non-Resident Overwriting .EXE Infector Detection Method: AVTK, Sweep, F-Prot, NAV, ViruScan, IBMAV, NAVDX, VAlert, Sweep/N, AVTK/N, NAV/N, NShld, NProt, IBMAV/N Removal Instructions: Delete infected files General Comments: The House virus was submitted in December, 1992. Its origin or point of isolation is unknown. House is a non-resident, direct action overwriting virus which infects .EXE programs on the A: and B: diskette drives. When a program infected with the House virus is executed, the House virus will infect all .EXE programs located in the current directories on the A: and B: drive which are larger than 11,636 bytes. Infected programs will have the first 11,636 bytes over- written by the House virus, permanently corrupting them. The file's date and time in the DOS disk directory will not be altered, and the file's length will not be changed. The following text strings can be found in the House viral code in all infected programs: "*.exe" "*HOUSEVIRUS*" "*.exe rb rb rb+" Programs infected with the House virus will not function properly, and will either return the user to the DOS prompt, or unexpected results may occur.