Suriv 1

Threat description

Details

Category: Malware
Type: Virus
Platform: W32

Summary

This is the oldest ancestor of the Jerusalem virus. On April 1st an infected computer will display the following message:

   APRIL 1ST HA HA HA YOU HAVE A VIRUS.  


Removal

Automatic action

Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.

More scanning & removal options

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details


Variant:Argentina, Xuxa, Anti-D, Dad

Several variants from Argentina, and probably all written by the same person. The first is 1249 bytes long and activates on various dates that are of patriotic significance in Argentina. The second is 1413 bytes long, and reported to play music in the afternoon. The third is 945 bytes and interferes with the "D" key on the keyboard. The last one is almost identical to the original - just with text messages translated to Spanish.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More