Dinky Virus
Virus Name: Dinky
Aliases: Dinky.122
V Status: New
Discovered: January, 1995
Symptoms: .COM file growth; file date/time changes;
unexpected system reboots
Origin: Unknown
Eff Length: 122 Bytes
Type Code: PRaCK - Parasitic Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV, NAVDX,
PCScan, ChAV,
AVTK/N, IBMAV/N, NShld, Sweep/N, NProt, NAV/N, Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The Dinky virus was received in January, 1995. Its origin or
point of isolation is unknown. Dinky is a memory resident
infector of .COM files, including COMMAND.COM.
When the first Dinky infected program is executed, this virus
will install itself memory resident in allocated system memory,
usually in a DOS buffer. Interrupt 21 will be hooked by the
virus in memory.
Once the Dinky virus is memory resident, it will infect .COM
files when they are executed. Infected .COM files will have a
file length increase of 122 bytes with the virus being located
at the beginning of the file. The program's date and time in the
DOS disk directory listing will have been updated to the current
system date and time when infection occurred. The following
text string is visible within the viral code in all Dinky infected
programs:
"KuDSR"
Once all of the .COM files in the current directory have become
infected, an unexpected system reboot may occur.