IQ Virus
Virus Name: IQ
Aliases: IQ.857
V Status: New
Discovered: January, 1996
Symptoms: .COM file growth; file date/time seconds = "60"
Origin: Unknown
Eff Length: 857 Bytes
Type Code: PNCK - Parasitic Resident .COM Infector
Detection Method: F-Prot, AVTK, IBMAV, ViruScan, NAV, NAVDX, ChAV,
AVTK/N, IBMAV/N, NShld, NAV/N, Innoc
Removal Instructions: Delete infected files
General Comments:
The IQ or IQ.857 virus was received in January, 1996. Its origin or
point of isolation is unknown. IQ is a non-resident, direct action
infector of .COM files, including COMMAND.COM.
When a program infected with the IQ virus is executed, this virus
will infect all of the previously uninfected .COM files located in
the current directory. Infected .COM files will have a file length
increase of 857 bytes with the virus being located at the end of the
file. The program's date and time in the DOS disk directory listing
will not appear to be altered, though the seconds field will have
been set to "60". The following text strings are visible within the
viral code:
"MOUSE"
"OINTS.002"
"*.*"
"*.COM"
"BS\NULLMODE\IQNET"
It is unknown what the IQ virus may do besides replicate.