Polish-45 Virus

Virus Name: Polish-45 Aliases: P-45 V Status: Viron Discovered: November, 1991 Symptoms: .COM programs overwritten; file date/time changes Origin: Poland Eff Length: 45 Bytes Type Code: ONCK - Overwriting Non-Resident .COM Infector Detection Method: Sweep, ViruScan, AVTK, F-Prot, PCScan, NAV, IBMAV, NAVDX, VAlert, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Polish-45 virus was submitted in November, 1991. This virus is a non-resident, direct action overwriting virus which corrupts the .COM programs it infectes. When a program infected with Polish-45 is executed, the virus will infect all .COM programs located in the current directory by over- writing the first 45 bytes of the program with a copy of the virus. Since the first 45 bytes are overwritten, the programs will be permanently damaged and will no function properly. There will only be a file length increase if the .COM file was originally smaller than 45 bytes. In this case, the file length will become 45 bytes. Infected files will have had their date and time in the DOS disk directory updated to the current system date and time when infection occurred. Programs infected with Polish-45 should be deleted and replaced with clean copies. It is not possible to disinfect these programs as the first 45 bytes of the original program have been lost.