FANDOM


Virus.DOS.HLLC.8304 is a file companion virus on DOS, it is written in high level programming language. This virus has an unofficial alias of Plane.

Behavior

When the virus is run, it randomly pick one EXE file, uses its name to generate a DOS executable by dropping itself into this new file. As on MS-DOS, for any two executables sharing the same filename, the DOS executable always run first, followed by the EXE one.

The file dropped by the virus would always have a size of 8,304 bytes. If there is already one drop program created by the virus in the same directory, further executions of the virus will generate nothing unless that file has been moved.

The user may run the host EXE program as usual, meanwhile the virus is also being run.

Payload

The virus activates by random. It draws an ASCII plane moving on the screen, and then it would drop off an ASCII man with parachute.

The user must wait until the ASCII animation ends.

Other details

The virus contains the internal text strings:

EXE /C
COMSPEC
*.exe

References

Description of HLLC, F-Secure Labs

See also

Videos

Virus.DOS03:01

Virus.DOS.Plane

HLLC.8304 virus review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.