F-Secure Virus Descriptions : Glupak

NAME:	Glupak
ALIAS:	Freaky, THU, Suicidal Dream
SIZE:	847
TYPE:	Non-resident COM-files
ORIGIN:	Canada

This is a buggy direct action infector of COM files. It activates on October 21st and attempts to overwrite the hard drive. After this it displays this text and hangs the PC:

        Happy Birthday Freaky!

Glupak also contains this encrypted text which is never shown:

        [TV.Suicidal.Dream.B] (c) 1996 The Freak/The Underground
        From the hypnotic spectre of wake I scream locked in depths
        of suicidal Dream

The virus might also delete *.ZIP and ANTI-VIR.DAT files.

Glupak was confirmed to be in the wild in Switzerland and Finland in April 1996.

There is another 890 byte variant with slightly different texts inside.

[Analysis: Mikko Hypponen, F-Secure]