Fandom

Malware Wiki

Plane

1,319pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.HLLC.8304, (commonly just called Plane) is a virus that runs on MS-DOS. It is written in high level programming language.

This virus is discovered in December 1996.

Behavior Edit

When the virus is run, it randomly pick one EXE file, uses its name to generate a DOS executable. As on MS-DOS, for any two executables sharing the same filename, the DOS executable always run first, followed by the EXE one.

The file dropped by the virus would always have a size of 8,304 bytes. If there is already one drop program created by the virus in the same directory, further executions of the virus will generate nothing unless that file has been moved.

The user may run the host EXE program as usual, meanwhile the virus is also being run.

Payload Edit

The virus activates by random. It draws an ASCII plane moving on the screen, and then it would drop off an ASCII man with parachute.

Other details Edit

The virus name "Plane" is not an official alias in the definition of the antiviruses' database, it is just given by the payload.

The virus contains the internal text strings:

EXE /C
COMSPEC
*.exe

References Edit

Description of HLLC, F-Secure Labs

See also Edit

HLLC

Videos Edit

Virus.DOS03:01

Virus.DOS.Plane

HLLC.8304 virus review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.