Virus.DOS.Magdzie is a memory resident parasitic virus on DOS.

There are 2 variants:

  • Virus.DOS.Magdzie.1056
  • Virus.DOS.Magdzie.1114


When the virus is loaded into memory, it hooks INT 21h to infect any EXE executable file that is closed by writing itself at the end of the file. On execution or opening the infected file the virus would temporarily disinfect it.

This virus deletes files in any extension having their filename starts with the string:


The infection size varies between different files.

Advanced details

The following table shows the memory usage of the variants.

Variant Memory usage in bytes
Magdzie.1056 1,104
Magdzie.1114 2,048

MD5 hashes:

Variant Hash
Magdzie.1056 0ec7d441ba59f1cabc0e0501fd590b73
Magdzie.1114 13cf4b7135027e5b00366e7425154956


When an infected program is run on May 27th, the virus switches the display to video mode, and manifest itself with a video effect plus a message:

Magdzie T. - jutro Twoje urodziny!

Translation (from Polish):

(For) Magda T. - tomorrow's Your birthday!

Other details

The virus contains the internal text string:





Magdzie virus review by Alles Sandro