Virus Name: Puke-393
V Status: Rare
Discovery: November, 1992
Symptoms: .COM & .EXE growth
Eff Length: 393 Bytes
Type Code: PRAK - Parasitic Resident .COM & .EXE Infector
Detection Method: ViruScan, F-Prot, Sweep, NAV, NAVDX, AVTK, IBMAV,
NShld, Sweep/N, NAV/N, AVTK/N, NProt, IBMAV/N, Innoc
Removal Instructions: Delete infected files
The Puke-393 virus was received from Australia in November, 1992.
Puke-393 is a memory resident infector of .COM and .EXE programs,
The first time a program infected with the Puke-393 virus is
executed, the Puke-393 virus will install itself memory resident in
a "hole" in low system memory, hooking interrupt 21. Total system
and available free memory, as indicated by the DOS CHKDSK program,
will not be altered.
Once memory resident, the Puke-393 virus will infect .COM and .EXE
programs, including COMMAND.COM, when they are executed. Infected
programs will have a file length increase of 393 bytes with the
virus being located at the end of the file. The program's date and
time in the DOS disk directory listing will not be altered. One
text string is visible within the viral code:
It is unknown if Puke-393 does anything besides replicate.