Klepavka Virus

Virus Name: Klepavka Aliases: V Status: New Discovered: January, 1995 Symptoms: .COM file growth; file date/time changes; TSR Origin: Unknown Eff Length: 881 Bytes Type Code: PRsCK - Parasitic Resident .COM Infector Detection Method: F-Prot, AVTK, IBMAV, ViruScan, Sweep, NAV, NAVDX, VAlert, PCScan, ChAV, AVTK/N, IBMAV, NShld, Sweep/N, NProt, NAV/N, Innoc 4.0+ Removal Instructions: Delete infected files General Comments: The Klepavka virus was received in January, 1995. Its origin or point of isolation is unknown. Klepavka is a memory resident infector of .COM files, including COMMAND.COM. When the first Klepavka infected program is executed, this virus will become memory reside as a low system memory TSR of approximately 1.4K. Interrupt 21 will be hooked by the virus in memory. Once the Klepavka virus is memory resident, it will infect .COM programs when they are executed or opened, but not when they are copied. Infected programs increase in size by 881 bytes with the virus being located at the end of the file. The file's date and time in the DOS disk directory listing will have been updated to the current system date and time when infection occurred. No text strings are visible within the viral code in infected programs. It is unknown what the Klepavka virus does besides replicate.