Quake Virus

Virus Name: Quake Aliases: V Status: Rare Discovery: May, 1992 Symptoms: .EXE file growth; shaking or "quaking" of system display Origin: The Netherlands Eff Length: 518 - 532 Bytes Type Code: PRfE - Parasitic Resident .EXE Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, NAVDX, VAlert, NAV, IBMAV, PCScan, ChAV, NShld, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The Quake virus was isolated in The Netherlands in May, 1992. It is a memory resident infector of .EXE programs with a very noticeable screen effect. The first time a program infected with the Quake virus is executed, the Quake virus will install itself memory resident in the DOS buffers. There will be no change to total system and available free memory. Once the Quake virus is resident, it will infect .EXE programs when they are executed. Infected programs will have a file length increase of 518 to 532 bytes with the virus being located at the end of the infected file. The program's date and time in the DOS disk directory listing will not be altered. There are no text strings visible within the viral code. Systems infected with the Quake virus will experience shaking or "quaking" of all but the bottom line of the system display. This effect occurs every few minutes.