
The Girafe virus uses Trident Polymorphic Engine to encrypt its code.

This virus infects both COM and EXE programs. It activates on
Thursdays, at which time it will display a cannabis leaf and the
message "Legalize Cannabis." Infected programs will have a file length
increase of 2000 - 4000 bytes.

The following text strings are encrypted within the viral code:

               COSCCLVSNEHTTBVIFIGIRAFEMTBRIM
               [ MK / Trident ]
               Amsterdam = COFFEESHOP!

This virus is made by a group called "TridenT" from the Netherlands.
