Puke-393 Virus

Virus Name: Puke-393 Aliases: Puke V Status: Rare Discovery: November, 1992 Symptoms: .COM & .EXE growth Origin: Australia Eff Length: 393 Bytes Type Code: PRAK - Parasitic Resident .COM & .EXE Infector Detection Method: ViruScan, F-Prot, Sweep, NAV, NAVDX, AVTK, IBMAV, VAlert, ChAV, NShld, Sweep/N, NAV/N, AVTK/N, NProt, IBMAV/N, Innoc Removal Instructions: Delete infected files General Comments: The Puke-393 virus was received from Australia in November, 1992. Puke-393 is a memory resident infector of .COM and .EXE programs, including COMMAND.COM. The first time a program infected with the Puke-393 virus is executed, the Puke-393 virus will install itself memory resident in a "hole" in low system memory, hooking interrupt 21. Total system and available free memory, as indicated by the DOS CHKDSK program, will not be altered. Once memory resident, the Puke-393 virus will infect .COM and .EXE programs, including COMMAND.COM, when they are executed. Infected programs will have a file length increase of 393 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. One text string is visible within the viral code: "[PuKE]" It is unknown if Puke-393 does anything besides replicate.