| Arusiek | |
|---|---|
| Type | File virus |
| Creator | |
| Date Discovered | 1993.05 |
| Place of Origin | Poland |
| Source Language | |
| Platform | DOS |
| File Type(s) | .com, .exe |
| Infection Length | 817 bytes |
| Reported Costs | |
Arusiek is a file virus from Poland. It was first discovered in Morocco in 1993.
Behavior
When Arusiek is executed, it installs itself in memory just below the DOS 640k boundary. It takes up 1,088 bytes in memory. It appends its code to .com and .exe files as they are executed, or if they are opened in any way.
It will display the text "Arusiek" in the year 1994 and all subsequent years. The virus will avoid infecting the Polish MKS-VIR antivirus program. The following text strings can be found in an infected file: "MKS", "NAV", "CLEAN", "COMMAND", "Mum3", "A�r�u�s�i�e�k".
Variants
Arusiek.Komar is 692 bytes long and takes up 800 bytes in memory. It infects .com and .exe files when they are executed, opened or copied. The text "KOMAR" can be found in the viral code.
Origin
Arusiek was first reported in Morocco and is erroneously reported to have come from there. It actually originated in Poland.
Sources
Patricia Hoffman. Online VSUM, Arusiek Virus.
F-Secure Antivirus, F-Secure Virus Descriptions : Arusiek.