%%File: VIRS0292.TXT
%%Name/Aliases: DenZuk, Venezuelan, Search, DenZuc B, Den Zuk, Mardi 
Bros, Sudah ada vaksin, Denzuko, Ohio, Hacker
%%Platform: PC/MS-DOS
%%Type: Boot sector., 
%%Disk Location: Floppy disk boot sectors.
%%Features: Memory resident; TSR above TOM.
%%Damage: Interferes with a running application., Corrupts boot sector
%%Size: Overlays boot sector, no increase, Uses1 boot sector and 9 
sectors on track 40
%%See Also: 
%%Notes: Infects floppy disk boot sectors, and displays a purple DEN ZUK 
graphic on a CGA, EGA or VGA screen when Ctrl-Alt-Del is pressed. 
F-Prot calls it Mardi Bros (virus-l, v5-072), but viruSafe says it is a 
different virus
 Discovered July 1990 in France, this virus installs itself 7168 bytes 
above high memory.  Infected diskettes have their volume lable changed 
to "Mardi Bros"  
Boot sector will contain the following message "Sudah ada vaksin"     
The label on an infected disk will read: "Y.C.1.E.R.P", where the "." is 
the F9h character.  

from virus-l, v6-107: Denzuko  is probably the first PC virus to format 
and store data on an extra diskette track.  This elegantly avoids the 
corruption of directory and file information that most other boot sector 
viruses are likely to cause, and the sudden appearance of "BAD clusters" 
that Brain causes.  However not all disk drives can access the extra 
tracks, and the disk media becomes less reliable near the centre of the 
disk.