| Description:
|
Details
Christmas.1539.a
This virus is not memory-resident, is very dangerous and encrypted. It bypasses subdirectories pointed in the "PATH=" command, and hits .COM-files (except IBMBIO.COM and IBMDOS.COM) it has found. The virus writes itself to the file beginning. On April 1st, it writes a small program into the MBR of the hard disk and into the Boot-sectors of floppies. Upon reboot, this routine displays the following text: "April, April all". From the 24th to the 31st of December, it displays a Christmas tree and the following text in German:
***
*****
*******
*********
***********
*************
***************
*****************
*******************
*********************
***********************
*************************
***************************
*****************************
___
___
___
-----------------------------------------------------------
Und er lebt doch noch : Der Tannenbaum !
Frohe Weihnachten ... |
