Virus Name: Small-145
V Status: Rare
Discovered: June, 1993
Symptoms: .COM file growth; file date/time changes
Eff Length: 145 Bytes
Type Code: PRxCK - Parasitic Resident .COM Infector
Detection Method: ViruScan, IBMAV, AVTK, F-Prot, Sweep, NAVDX, PCScan,
NAV, VAlert, ChAV,
LProt, Sweep/N, NShld, NProt, AVTK/N, NAV/N, IBMAV/N,
Removal Instructions: Delete infected files
The Small-145 virus was submitted in June, 1993, its origin is
unknown. Small-145 is a memory resident infector of .COM programs
When the first Small-145 infected program is executed, this virus
will install itself memory resident in a "hole" in low allocated
system memory, hooking interrupt 21. Total system and available free
memory, as indicated by the DOS CHKDSK program, will not be altered.
Once the Small-145 virus is memory resident, it will infect .COM
programs, including COMMAND.COM, when they are executed. Infected
programs will have a file length increase of 145 bytes with the
virus being located at the beginning of the file. The program's
date and time in the DOS disk directory listing will have been
updated to the current system date and time when infection occurred.
No text strings are visible within the viral code in Small-145
Small-145 doesn't do anything besides replicate.