Quck Virus

Virus Name: Quck Aliases: Quck.823 V Status: New Discovery: January, 1996 Symptoms: .COM file growth; file date/time seconds = "16"; unexpected system reboots may occur Origin: Unknown Eff Length: 823 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: NAV, NAVDX, ViruScan, IBMAV, AVTK, VAlert, F-Prot, ChAV, AVTK/N, NAV/N, NShld, IBMAV/N, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Quck or Quck.823 virus was received in January, 1996. Its origin or point of isolation is unknown. Quck is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Quck virus is executed, this virus will infect the first .COM file located in the current directory, regardless of whether the .COM file was previously infected by the virus. Infected .COM files will have a file length increase of 823 bytes for each copy of the virus located on the infected file. The virus will be located at the end of the file. The program's date and time in the DOS disk directory listing will not appear to be altered, though the seconds field will have been set to "16". The following text strings are visible within the viral code: "King_Size 92" "PATH=A:\*.COM A:\*" "????????COM" Unexpected system reboots may occur when infected programs are executed.