Advent.276

Name:
Advent.276
Info:
Details Advent.2764 This is non-resident harmless virus that upon execution, infects COM and EXE files. It infects EXE files in a standard way, and in COM files, it replaces the first 23h bytes in the file beginning with a jump to the virus body. The major parts of the virus are encoded. The virus don’t activate if the string “VIRUS=OFF” is found in the ENVIRONMENT. From mid-November, the virus runs itself by wishing a user “MERRY CHRISTMAS!” accompanied by simple pictures and a basic musical tune.

Leave a Reply

Your email address will not be published. Required fields are marked *