Smaug Virus
Virus Name: Smaug
Aliases:
V Status: Rare
Discovered: September, 1993
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 349 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, IBMAV, AVTK, Sweep, PCScan,
NAV, NAVDX, VAlert, ChAV,
NShld, NProt, AVTK/N, Sweep/N, IBMAV/N, NAV/N, Innoc,
LProt
Removal Instructions: Delete infected files
General Comments:
The Smaug virus was submitted in September, 1993. Its origin or
point of isolation is unknown. Smaug is a non-resident, direct
action infector of .COM programs, but not COMMAND.COM.
When a program infected with the Smaug virus is executed, this
virus will infect one .COM program located in the current directory.
Infected programs will have a file length increase of 349 bytes with
the virus being located at the end of the file. The program's date
and time in the DOS disk directory listing will not be altered. The
following text string is visible within the viral code in all Smaug
infected programs:
"COMMAND.*.COM"
"I$ WRD MIG"
"$MG IV$"