Virus Name: Polish-45
V Status: Viron
Discovered: November, 1991
Symptoms: .COM programs overwritten; file date/time changes
Eff Length: 45 Bytes
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: Sweep, ViruScan, AVTK, F-Prot, PCScan,
NAV, IBMAV, NAVDX, VAlert, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: Delete infected files
The Polish-45 virus was submitted in November, 1991. This virus is
a non-resident, direct action overwriting virus which corrupts the
.COM programs it infectes.
When a program infected with Polish-45 is executed, the virus will
infect all .COM programs located in the current directory by over-
writing the first 45 bytes of the program with a copy of the virus.
Since the first 45 bytes are overwritten, the programs will be
permanently damaged and will no function properly. There will only
be a file length increase if the .COM file was originally smaller
than 45 bytes. In this case, the file length will become 45 bytes.
Infected files will have had their date and time in the DOS disk
directory updated to the current system date and time when infection
Programs infected with Polish-45 should be deleted and replaced with
clean copies. It is not possible to disinfect these programs as the
first 45 bytes of the original program have been lost.