WHS.Vred

Risk Level 1: Very Low

Printer Friendly Page

Discovered: June 28, 2007
Updated: July 5, 2007 9:13:51 PM
Infection Length: 196 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000

Once executed, the virus searches within the current directory for other .WHS files to infect on that compromised computer that has the WinHex application installed.

The virus prepends itself to any .WHS file that is not already infected. It does not run the host code after the replication cycle completes.

The virus does nothing but replicate.

Writeup By: Peter Ferrie
Search by name
Example: W32.Beagle.AG@mm
Learn more about Zero-Day / Operation Aurora / Hydraq
Symantec DeepSight Screensaver