There are 3 variants:
When the virus is loaded into memory, it hooks INT 9 and 21h to infect any DOS executable file by writing itself to the end of these files that are created or copied. When a file is being copied, the virus copies its code to both the new copy and the original one.
The virus has a TSR code name of "JeSuS" when it stays memory resident.
Memory usage of the variants:
|Variant||Memory usage in bytes|
The virus activates on every Sunday during March or April. When the user issues Ctrl-Alt-Del, it activates by displaying an ASCII image of Jesus (animated), plays the tune and displays messages before the machine reboots.
LAMER Copyright (c) Moscow, 1997
It`s a stupid virus, but i like it Welcome every day in march and april! Now i`ll show you how its work...
Crucifixion.2914 and 2916:
(rucifixion Virus 1.0 (c) 1994, by Jesus of The Trinity
If you're the Messiah and you know it, Then your face will surely show it, Clap your hands!
Crucifixion.2888 is a cracked version of the original variant, released in 1997.
This virus might not be able to run properly under some system hardware configurations.
- List of variants of the Crucifixion virus on VX Heaven
- Description of the Crucifixion virus on Online VSUM