Home Page
Site Contents

Name:Eyes Virus Hoax
Alias: WinEyes

This is a common false alarm, created by a 'joke' program, which displays a set of eyes on Windows screen. We've received several samples of EYES.EXE and WINEYES.EXE, but they have never been harmful so far.

This kind of hoax is different from the traditional e-mail chain letter hoaxes, such as Good Times, since several innocent programs have received lots of publicity lately as they have been accused of being trojans or viruses.

Naturally, whenever any program is declared clean, there's a risk that somebody will take the file and infect it - since people will now trust it. To overcome this problem, you can verify the files against the 32-bit CRC's of the confirmed clean versions.

One confirmed-clean version of EYES.EXE has the following CRCs as displayed by PKUNZIP:

 Length  Method   Size  Ratio   Date    Time    CRC-32  Attr  Name 
  ------  ------   ----- -----   ----    ----   -------- ----  ---- 
   54048  DeflatX   9157  84%  11-15-96  14:42  ba2cda0b --w-  EYES.EXE 
  ------          ------  ---                                  ------- 

[Mikko Hypponen, Data Fellows Ltd's F-PROT Pro Support]