FANDOM


Virus.DOS.Andrew.634 or Andrew is a virus that runs on MS-DOS.

Payload

Andrew is a dangerous, memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On May 15 it overwrites the contents of the Boot sector of current disk with the string:

Happy birthday to Andrew !

Videos

Sources

Securelist (Kaspersky Labs), Virus.DOS.Andrew.634