Little-139 Virus

Virus Name: Little-139 Aliases: V Status: Rare Discovered: March, 1993 Symptoms: .COM file growth; file date/time changes Origin: Unknown Eff Length: 139 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: AVTK, ViruScan, F-Prot, Sweep, IBMAV, NAV, NAVDX, VAlert, PCScan, ChAV, NShld, AVTK/N, Sweep/N, IBMAV/N, Innoc, NAV/N, LProt Removal Instructions: Delete infected programs General Comments: The Little-139 virus was submitted in March, 1993, with documentation indicating that it was written for the "First International Virus Writing Contest 1993" sponsored by American Eagle Publications, Inc. It was submitted with original source code, and is a simple, non- resident, direct action .COM infector. When a program infected with the Little-139 virus is executed, this virus will infect one .COM program located in the current directory. Infected programs will have a file length increase of 139 bytes with the virus being located at the beginning of the file. The program's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. The following text string is visible within the viral code: "*.COM 3" Little-139 doesn't do anything besides replicate.