Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Suriv 1


Aliases:


Suriv 1
April 1. COM

Malware
Virus
W32

Summary

This is the oldest ancestor of the Jerusalem virus. On April 1st an infected computer will display the following message:

   APRIL 1ST HA HA HA YOU HAVE A VIRUS.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details


Variant:Argentina, Xuxa, Anti-D, Dad

Several variants from Argentina, and probably all written by the same person. The first is 1249 bytes long and activates on various dates that are of patriotic significance in Argentina. The second is 1413 bytes long, and reported to play music in the afternoon. The third is 945 bytes and interferes with the "D" key on the keyboard. The last one is almost identical to the original - just with text messages translated to Spanish.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.