Virus Name: Klepavka
V Status: New
Discovered: January, 1995
Symptoms: .COM file growth; file date/time changes; TSR
Eff Length: 881 Bytes
Type Code: PRsCK - Parasitic Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV,
NAVDX, VAlert, PCScan, ChAV,
AVTK/N, IBMAV, NShld, Sweep/N, NProt, NAV/N, Innoc 4.0+
Removal Instructions: Delete infected files
The Klepavka virus was received in January, 1995. Its origin or
point of isolation is unknown. Klepavka is a memory resident
infector of .COM files, including COMMAND.COM.
When the first Klepavka infected program is executed, this virus
will become memory reside as a low system memory TSR of
approximately 1.4K. Interrupt 21 will be hooked by the virus in
Once the Klepavka virus is memory resident, it will infect .COM
programs when they are executed or opened, but not when they are
copied. Infected programs increase in size by 881 bytes with the
virus being located at the end of the file. The file's date and
time in the DOS disk directory listing will have been updated to
the current system date and time when infection occurred. No
text strings are visible within the viral code in infected programs.
It is unknown what the Klepavka virus does besides replicate.