There are 2 variants:
They search for files in current directory, and then write themselves to the end of file.
This is an encrypted memory resident variant, which infects EXE executable.
This is a non-memory resident variant which infects DOS executable. The virus does not infect every file but it might corrupt them during infection. Files infected by this variant might cause a system hang or memory allocation error when run.
The following table shows the memory usage of the variants.
|Variant||Memory usage in bytes|
This variant displays a graphical effect when activated.
When an infected program is run on the 10th day in any month, the virus hangs the system.
There is a virus sharing the same name, HLLO.AIDS, which is an overwriting virus written in high level programming language.
Aids.872 contains the internal text string:
Payload of AIDS.552, archive.org