Iron Umbrella Virus
Virus Name: Iron Umbrella
V Status: Rare
Discovered: June, 1993
Symptoms: .COM file growth
Eff Length: 359 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, AVTK, IBMAV, NAVDX, VAlert,
NAV, Sweep, PCScan, ChAV,
NShld, AVTK/N, NProt, NAV/N, IBMAV/N, Sweep/N, Innoc,
Removal Instructions: Delete infected files
The Iron Umbrella virus was submitted in June, 1993, and appears to
be from Germany. Iron Umbrella is a non-resident, direct action
infector of .COM programs, including COMMAND.COM.
When a program infected with the Iron Umbrella virus is executed,
this virus will infect one .COM program located in the current
directory. Infected programs will have a file length increase of
359 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not
be altered. The following text strings are encrypted within the
viral code in all Iron Umbrella infected programs:
"(C) 1991 by SMAUG in MNCHEN, DEUTSCHLAND!"
The first text string, read backwards, contains the virus' name.