Discovered: June 28, 2007
Updated: July 5, 2007 9:13:51 PM
Infection Length: 196 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003, Windows 2000
Once executed, the virus searches within the current directory for other .WHS files to infect on that compromised computer that has the WinHex application installed.
The virus prepends itself to any .WHS file that is not already infected. It does not run the host code after the replication cycle completes.
The virus does nothing but replicate.
Writeup By: Peter Ferrie