Kuku-448 Virus

Virus Name: Kuku-448 Aliases: Ku-448 V Status: Rare Discovered: November, 1991 Symptoms: .COM file growth; programs overwritten; message displayed Origin: Unknown Eff Length: 448 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, AVTK, Sweep, F-Prot, ChAV, IBMAV, NAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected programs General Comments: The Kuku-448 virus was submitted in November, 1991. Its origin, or point of original isolation, is unknown. Kuku-448 is a non- resident, direct action infector of .COM files, including COMMAND.COM. Kuku-448 can be a destructive virus, overwritting programs in advanced infection cases. When a program infected with Kuku-448 is executed, the Kuku-448 virus will search the current directory for one uninfected .COM program to infect. If COMMAND.COM is located in this directory, it may become infected. Kuku-448 infected programs will have a file length increase of 448 bytes with the virus being located at the beginning of the file. There will be no change to the file's date and time in a DOS disk directory listing. If Kuku-448 does not find one uninfected .COM file to infect, it will overwrite one .COM file in the current directory with a small trojan program. Later, when these programs are executed, the program will write the word "Kuku!" in small colored boxes all over the system display.