W95.HPS


Aliases: Hanta
Variants: Hantavirus Pulmonary Syndrome

Classification: Malware
Category: Computer Virus

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: Feb. 13, 2007
Damage: Low

Characteristics: The W95.HPS program is a virus that is polymorphic which is infecting the PE file or the Portable Executable files.

More details about W95.HPS

W95.HPS is a type of virus that is polymorphic that actually infects the Portable Executables files or the PE files including all of the Windows 95 having the EXE files. It has an infection length of 5 to 6 bytes.This virus was also known as the Hanta or the Hanta virus Pulmonary Syndrome. Once the infected program was run, the virus will then goes to the memory then it will reside there. The virus will then keep on infecting the programs, any of them, that the user are running or currently using. The virus will then adds itself to the last segment of the files and make some adjustments to the other suitable files and to the Entry point of the header of the Portable Executable file.

The engine of the polymorphic will then create a fresh and newly decrypted loop having each creation but all of the infections in the similar creation will have then similar decryption loops. The virus tries to sneak itself through reporting the file size that was not infected by the virus in the Windows. Then the virus will try to flip the files of the Bitmap including the logo of the Windows 95 during or on Saturdays. The virus will then search for the files such as IVP.NTZ, CHKLIST.MS, AVP.CRC and ANTI-VIR.DAT and will then tries to delete these particular files.