The ZUC Virus operates by searching the Desktop file for the location of an application.
If the application found is not one on its
“avoid” list (such as a virus detection program), it infects that application. This means that an application does not have to be run in order for it to become infected.
NOTE: The ZUC Virus does not change the modification date of applications it infects. Therefore it cannot be detected by checking this date; also virus control programs reporting the modification date will not be showing the date of infection.