Polish Tiny Virus

Virus Name: Polish Tiny Aliases: Polish Tiny-150 V Status: Rare Discovered: October, 1992 Symptoms: .COM file growth; file date/time changes; programs do not execute Origin: Poland Eff Length: 150 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, Sweep, AVTK, F-Prot, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The Polish Tiny virus was submitted in October, 1992. It is from Poland, and is a non-resident direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Polish Tiny virus is executed, the virus will infect one .COM program located in the current directory, and then return the user to the DOS prompt. Infected programs will have a file length increase of 150 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time. One text string is visible within the viral code: "*.com" This virus does not do anything besides replicate, though infected programs will not function properly. Known variant(s) of Polish Tiny are: Polish Tiny-158: Functionally similar to the Polish Tiny virus described above, this variant adds 158 bytes to the .COM programs it infects. Origin: Poland October, 1992. Polish Tiny-176: Functionally similar to the Polish Tiny virus described above, this variant adds 176 bytes to the .COM programs it infects. It contains one text string: "*.com" Origin: Poland June, 1993. Polish Tiny-226: Functionally similar to the Polish Tiny virus described above, this variant adds 226 bytes to the .COM programs it infects. Origin: Poland December, 1992.