Virus Name: Ionkin
V Status: Rare
Discovered: December, 1992
Symptoms: .COM file growth; file date/time changes
Eff Length: 231 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: Sweep, AVTK, F-Prot, ViruScan, IBMAV,
NAV, NAVDX, VAlert, PCScan, ChAV,
Sweep/N, NShld, Innoc, NProt, AVTK/N, LProt, IBMAV/N,
Removal Instructions: Delete infected files
The Ionkin, or Ionkin-231, virus was submitted in December 1992.
It is originally from the USSR. Ionkin-231 is a non-resident,
direct action infector of .COM programs, including COMMAND.COM.
It doesn't infect .COM programs smaller than approximately 5K
When a program infected with the Ionkin virus is executed, the
Ionkin virus may infect up to two .COM programs located in the
current directory. Infected programs will have a file length
increase of 231 bytes with the virus being located at the end
of the file. The program's date and time in the DOS disk directory
listing will have been updated to the current system date and time.
The following text string is visible within all Ionkin infected
Known variant(s) of Ionkin are:
Ionkin-2372: Also received in December, 1992, Ionkin-2372 is
a 2,372 byte variant of the Ionkin virus described
above. It may infect one .COM program larger than
approximately 5K when an infected program is executed.
Infected programs will have a file length increase of
2,372 byte with the virus being located at the end of
the file. The program's date and time in the DOS disk
directory listing will have been updated to the current
system date and time. The following text strings are
visible within the viral code:
Origin: USSR December, 1992.