Httm Virus

Virus Name: Httm Aliases: Httm.241 V Status: Viron Discovered: August, 1996 Symptoms: .COM file corruption; programs fail to execute properly; file date/time changes; graphic displayed Origin: Unknown Eff Length: 241 Bytes OW Type Code: ONCK - Non-Resident Overwriting .COM Infector Detection Method: ChAV, AVTK, ViruScan, NAV, NAVDX, Innoc, AVTK/N, NAV/N Removal Instructions: Delete infected files General Comments: The Httm virus was received in August, 1996. Its origin or point of isolation in unknown. Httm is a non-resident overwriting virus which infects .COM files, including COMMAND.COM. When a program infected with the Httm virus is executed, this virus will infect all of the .COM files in the current directory, as well as display a graphic of a huge orange "V" with a background of red and white bars on the system display. Programs infected with the Httm virus will have the first 241 bytes of the host program overwritten by the viral code, thus permanently corrupting them. The file's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text string is visible within the viral code: "[HtTM]*.Com" Programs infected with this virus are permanently corrupted and must be deleted and replaced with uninfected backup copies.