Virus
HPS
Hantavirus Pulmonary Syndrome (HPS) Virus BioCoded by GriYo
/ 29A
España/1998
This 5124 bytes virus is a Windows95/98 infector that installs
itself into the Windows kernel, hooks system events and then
affects Portable Executable (PE) files that are accessed.
The virus has a video trigger routine. When
the virus installs itself into Windows memory, it gets the
system date. If it is installing on Saturday, it then will
affect any not compressed BMP files - the virus flips contents
of BMP image and they will be displayed from right to left.
The virus marks flipped images with DEADBABEh stamp and does
not flip them twice back to original state.
CNN titled: "A virus can infect Windows98
before the official launching from this product to the market
".
|