Advent.276
Details
Advent.2764
This is non-resident harmless virus that upon execution, infects COM and EXE files. It infects EXE files in a standard way, and in COM files, it replaces the first 23h bytes in the file beginning with a jump to the virus body.
The major parts of the virus are encoded. The virus don’t activate if the string “VIRUS=OFF” is found in the ENVIRONMENT.
From mid-November, the virus runs itself by wishing a user “MERRY CHRISTMAS!” accompanied by simple pictures and a basic musical tune.
Related Posts