Fandom

Malware Wiki

Magdzie

1,346pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.Magdzie is a memory resident parasitic virus on DOS.

There are 2 variants:

  • Virus.DOS.Magdzie.1056
  • Virus.DOS.Magdzie.1114

Behavior

When the virus is loaded into memory, it hooks INT 21h to infect any EXE executable that is closed by writing itself at the end of the file. On execution or opening the infected file the virus would temporarily disinfect it.

This virus deletes files in any extension having their filename starts with the string:

CHKLIST

The infection size varies between different files.

Memory usage

The following table shows the memory usage of the variants.

Variant Memory usage in bytes
Magdzie.1056 1,104
Magdzie.1114 2,048

Payload

When an infected program is run on May 27th, the virus switches the display to video mode, and manifest itself with a video effect plus a message:

Magdzie T. - jutro Twoje urodziny!

Translation (from Polish):

(For) Magda T. - tomorrow's Your birthday!

Other details

The virus contains the internal text string:

chklist?.*

Videos

Virus.DOS01:31

Virus.DOS.Magdzie

Magdzie virus review by Alles Sandro

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.