Threat Description

Jihuu.621

Details

Aliases:Jihuu.621, 621
Category:Malware
Type:Virus
Platform: W32

Summary



This virus activates on Friday the 13th displaying the message:

"Something wonderful has happened, your PC is alive".

When it is on the 4th day of any month it shows the message:

"Water detected in match-co-processor".


Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



Jihuu will activate in the year 2000. Then it tries to overwrite the hard disk and displays:

"PARITY ERROR System halted".

Variant:Jihuu.686

Size:686

This variant was found almost three years after the variant 621 - in May 1994. The operation of the virus is identical, but the text messages have been encrypted with XOR FFh operation.





Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More