FANDOM


Virus.DOS.Gisela.702 is a dangerous memory resident parasitic virus on DOS.

Behavior

When the virus is in memory, it first infects C:\COMMAND.COM, then it hooks INT 21h to infect any DOS executable file that is run by writing itself to the end of the file.

Not every file would be infected by the virus, and it does not infect files that are smaller than or equal to 1,000 bytes.

Files infected by the virus might not function properly or even cause a system crash.

Memory usage

The exact memory usage is 720 bytes.

Payload

On January 21, when the virus is in memory, on running any program the virus decrypts and displays the message, followed by beeps:

Virus GISELA 2.0 By EJECUTOR (Hecho en Argentina)
Feliz cumpleaños Gisela.

Translation (from Spanish):

Virus GISELA 2.0 By EJECUTOR (Made in Argentina)
Happy birthday Gisela.

Other details

The virus contains the internal text string:

c:\command.com

Videos

Virus.DOS.Gisela00:30

Virus.DOS.Gisela.702

Gisela virus review by Alles Sandro

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.