Threat Description

Jihuu.621

Details

Aliases: Jihuu.621, 621
Category: Malware
Type: Virus
Platform: W32

Summary



This virus activates on Friday the 13th displaying the message:

"Something wonderful has happened, your PC is alive".

When it is on the 4th day of any month it shows the message:

"Water detected in match-co-processor".



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



Jihuu will activate in the year 2000. Then it tries to overwrite the hard disk and displays:

"PARITY ERROR System halted".


Variant:Jihuu.686

Size:686

This variant was found almost three years after the variant 621 - in May 1994. The operation of the virus is identical, but the text messages have been encrypted with XOR FFh operation.





Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More