School_Suck virus was found to be in the wild in Turku, Finland in late September 1994. It is a simple virus that infects only COM files in current directory. No encryption technique is used and the virus has the following text inside it:
File is overwrited by SCHOOL SUCK! virus. Finnish quality!
The virus is programmed to activate at the 17th day of any month, but this routine doesn't work because of a programming error.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.
Description Details: Mikko Hypponen, F-Secure