Fandom

Malware Wiki

Advent

1,321pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.Advent or Advent is a virus that runs on MS-DOS.

This virus has 4 versions:

  • Virus.DOS.Advent.2764
  • Virus.DOS.Advent.Cookie.2232
  • Virus.DOS.Advent.Syslock.3550
  • Virus.DOS.Advent.Syslock.3551

PayloadEdit

Virus.DOS.Advent.2764Edit

Advent.2764 is non-resident virus that upon execution, infects .COM and .EXE files. It infects .EXE files in a standard way, and with .COM files, it replaces the first 23 bytes in the file beginning with a jump to the virus body.

The major parts of the virus are encoded. The virus doesn't activate if the string "VIRUS=OFF" is found in the environment string.

From mid-November, the virus runs itself by wishing a user "MERRY CHRISTMAS!" accompanied by simple pictures and a basic musical tune.

Virus.DOS.Advent.Cookie.2232Edit

Advent.Cookie.2232 is non-resident virus that upon execution, infects .COM and .EXE files. It infects .EXE files in a standard way, and with .COM files, it replaces the first 23 bytes in the file beginning with a jump to the virus body.

This virus says "I want a COOKIE !", waits for clicking on the 'cookie' letters and then says: "BURPS.....".

Virus.DOS.Advent.Syslock.3550Edit

Unknown

Virus.DOS.Advent.Syslock.3551Edit

Unknown

VideosEdit

Virus.DOS.Advent.Cookie00:31

Virus.DOS.Advent.Cookie.2232

Virus.DOS.Advent.Cookie.2232


Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.