A polymorphic virus changes its code (decryption module) on each infection to avoid detection by signature-based antivirus. Option B correctly identifies that the decryption module is modified, while A incorrectly states the encryption module changes.