Viral Rewind: Virus.DOS.Obora (Kevin.1558)

Obora is a TSR-style virus for DOS that infects only .EXE files yet it takes a slower method of infecting files on a machine. When loaded it monitors how many times programs are run (whether it is .COM or .EXE). After it detects three program executions it will infect one .EXE program in the current directory in alphabetical order. Due to the nature of how it infects some programs can become unusable.
Payloads:
On any Sunday of any month when Obora is first run at certain times of the day it will "blank" the screen every ten seconds. This effect persists between DOS and any fullscreen programs that are in use.
On the 22nd of any month when Obora is first run it will display a flag of Poland with flashing text below it that reads:
"MY NAME IS TROUBLe HELLO FROM KETY CREATED BY KEVIN"
At this point it will erase the stored floppy disk drive information from the CMOS memory and change the DOS font color to a cyan-like appearance (possibly from the graphical payload). The payload will not occur again until the system is restarted.
-----------------------------------------------------------
Visit my Linktree to access my socials and other channels: linktr.ee/maus...

[@SC-750theMarbleMan]

You’re back again!