JHC.1634

Risk Level 1: Very Low

Printer Friendly Page|Rate this page

Discovered:: January 30, 2003
Updated:: February 13, 2007 11:57:40 AM
Type:: Virus
Systems Affected:: Windows 2000, Windows 3.x, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

JHC.1634 is a memory-resident DOS virus that infects the .exe, and .com files, as well as the Master Boot Record (MBR). The size of the infected files are increased by 1,634 bytes.

If the virus is executed from:

A file, the free conventional memory is reduced by 3,674 bytes.
The MBR, the total conventional memory is reduced by 4 KB.

JHC.1634 carries a destructive payload. If the virus is executed on June 17th, it attempts to overwrite with blank content any loaded and executed programs.

NOTE: Definitions dated prior to January 31, 2003 may detect this threat as Bloodhound.ResCOM or Bloodhound.ResEXE.

Antivirus Protection Dates

Initial Rapid Release version January 31, 2003
Latest Rapid Release version January 31, 2003
Initial Daily Certified version January 31, 2003
Latest Daily Certified version January 31, 2003
Initial Weekly Certified release date February 5, 2003

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low

Distribution

Distribution Level: Low

Writeup By: Robert X Wang

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16