Chukc Virus

Virus Name: Chukc Aliases: Chukc.554 V Status: New Discovery: July, 1995 Symptoms: .COM file growth; file date/time changes; text displayed Origin: Unknown Eff Length: 554 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, VAlert, NAV, NAVDX, Sweep, IBMAV, ViruScan, ChAV, Sweep/N, NAV/N, AVTK/N, IBMAV/N, NShld, Innoc Removal Instructions: Delete infected files General Comments: The Chukc or Chukc.544 virus was received in July, 1995. Its origin or point of isolation is unknown. Chukc is a non-resident, direct action infector of .COM files, including COMMAND.COM. When a program infected with the Chukc virus is executed, this virus will infect all of the .COM files located in the current directory. Infected files will have a file length increase of 554 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code: "*.COM" "????????COM" The following text with special characters is displayed after the virus has infected files: "m�� �����, ����, ��� �������� ������� !" This string can also be found within the viral code. Known variant(s) of Chukc are: Chukc.838: Received in July, 1995, Chukc.838 is an 838 byte variant of the Chukc virus described above. It infects all of the .COM files located in the current directory when an infected program is executed, adding 838 bytes to their length. The virus will be located at the beginning of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text strings are visible within the viral code: "*.COM" "????????COM" Infected programs may display multi-colored text from memory, and a system hang may occur, when infected programs are executed. Origin: Unknown July, 1995.