Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

O1vic

The weird name of the virus is derived from the fact that after the virus body is decoded, at its end an inscription is displayed:

VZDY MAS O JEDEN VIRUS VIC, NEZ SI MYSLIS.
(meaning – YOU ALWAYS HAVE ONE VIRUS MORE THAT YOU EXPECT)

This is a simple, resident, encrypted COM infector 739 bytes long. It occupies 1616 bytes in memory and it hooks the interrupts INT 21h and INT 8h. The virus infects files when they are opened and executed. It never writes the above mentioned string. If it is in memory the computer clock runs backwards and at double speed. Text in the virus suggests that its origin is in Czech republic.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.