|Place of Origin||Poland|
|Infection Length||1,030 - 1,040 Bytes|
5lo is a virus discovered in 1993 from Poland. When 5lo is executed, it becomes memory resident, installing itself at the top of system memory below the 640 kilobyte DOS boundary. Any .exe program that executes from then on becomes infected. It makes no attempt to hide itself, and even changes the date on infected files to the time they were infected.
The virus contains the string "92.05.24.5lo.2.23MZ", from which it gets its name. Some of it may indicate the date it was actually coded.
Patricia Hoffman. Online VSUM, 5Lo virus.