IronFist Virus
Virus Name: IronFist
Aliases: IronFist.188
V Status: New
Discovered: July, 1995
Symptoms: .COM file growth; message displayed
Origin: Unknown
Eff Length: 188 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, VAlert, NAVDX, NAV, Sweep, IBMAV,
ViruScan, PCScan, ChAV,
Sweep/N, NAV/N, IBMAV/N, NShld, AVTK/N, Innoc 4.0+
Removal Instructions: Delete infected files
General Comments:
The IronFist or IronFist.188 virus was received in July, 1995. Its
origin or point of isolation is unknown. IronFist is a non-resident,
direct action infector of .COM files, but not COMMAND.COM.
When an IronFist infected program is executed, this virus will
infect one .COM file located in the current directory, but not
COMMAND.COM. If it is able to find a program to infected, it will
then display the following message:
"Evil has an iron fist"
Programs infected with the IronFist virus will have a file length
increase of 188 bytes with the virus being located at the beginning
of the file. The program's date and time in the DOS disk
directory listing will not be altered. The following text strings
are visible within the viral code:
"*.COM"
"Evil has an iron fist"