Summary

School_Suck virus was found to be in the wild in Turku, Finland in late September 1994. It is a simple virus that infects only COM files in current directory. No encryption technique is used and the virus has the following text inside it:

     File is overwrited by SCHOOL SUCK! virus. Finnish quality!

The virus is programmed to activate at the 17th day of any month, but this routine doesn't work because of a programming error.

[Analysis: Mikko Hypponen, F-Secure]