Techguy
November 21, 2000, 10:23 am
PE_HIV
Risk rating: low
Virus type: File Infector
Destructive: Y
Aliases:
W32.HIV, HIV
Description:
This PE virus infects all Win 32 Applications with file sizes ranging from 16,384 bytes up to 4,294,967,295 bytes or 4,294 Giga Bytes. It infects these files by appending its code to the files. Upon execution, this virus modifies system components and disables file protection. It also automatically downloads a file from the virus writer’s website. This file may be an upgraded version of the virus or any other malicious code, depending on the virus writer. The virus also overwrites target HTML files. Once its anti-debugging routines are executed, the virus hangs the infected PC using the System Bootstrap Loader.
Solution:
At the Command Prompt type REGEDIT.
Locate:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
CurrentVersion\Run.
Delete HIV Key.
At Root Directory Delete the files MSXMLP.EXE and PRESS.XML
Scan your system with your antivirus and delete all files detected as PE_HIV, HTML_HIV and HTML_HIV.DLDR.
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.
Risk rating: low
Virus type: File Infector
Destructive: Y
Aliases:
W32.HIV, HIV
Description:
This PE virus infects all Win 32 Applications with file sizes ranging from 16,384 bytes up to 4,294,967,295 bytes or 4,294 Giga Bytes. It infects these files by appending its code to the files. Upon execution, this virus modifies system components and disables file protection. It also automatically downloads a file from the virus writer’s website. This file may be an upgraded version of the virus or any other malicious code, depending on the virus writer. The virus also overwrites target HTML files. Once its anti-debugging routines are executed, the virus hangs the infected PC using the System Bootstrap Loader.
Solution:
At the Command Prompt type REGEDIT.
Locate:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
CurrentVersion\Run.
Delete HIV Key.
At Root Directory Delete the files MSXMLP.EXE and PRESS.XML
Scan your system with your antivirus and delete all files detected as PE_HIV, HTML_HIV and HTML_HIV.DLDR.
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.