School_Suck virus was found to be in the wild in Turku, Finland in late September 1994. It is a simple virus that infects only COM files in current directory. No encryption technique is used and the virus has the following text inside it:
File is overwrited by SCHOOL SUCK! virus. Finnish quality!
The virus is programmed to activate at the 17th day of any month, but this routine doesn't work because of a programming error.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Description Created: Mikko Hypponen, F-Secure