Classification

Category: Malware

Type: Virus

Aliases: Suriv 1, April 1. COM

Summary


This is the oldest ancestor of the Jerusalem virus. On April 1st an infected computer will display the following message:

 APRIL 1ST HA HA HA YOU HAVE A VIRUS.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details



Variant:Argentina, Xuxa, Anti-D, Dad

Several variants from Argentina, and probably all written by the same person. The first is 1249 bytes long and activates on various dates that are of patriotic significance in Argentina. The second is 1413 bytes long, and reported to play music in the afternoon. The third is 945 bytes and interferes with the "D" key on the keyboard. The last one is almost identical to the original - just with text messages translated to Spanish.