Incom Virus

Virus Name: Incom Aliases: V Status: Rare Discovered: May, 1991 Symptoms: .COM file growth; file date/time changes Origin: Europe Eff Length: 648 Bytes Type Code: PNC - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, ChAV, NAV, IBMAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Incom virus was submitted in May, 1991 from Europe. Incom is a non-resident direct action infector of .COM programs. It does not infect COMMAND.COM. When a program infected with Incom is executed, the Incom virus will infect all uninfected .COM programs, except COMMAND.COM, located in the current directory. Infected .COM programs will increase in size by 648 bytes with the virus being located at the end of the infected file. The infected program's date and time in the DOS disk directory will be updated to the current system date and time. Incom infected programs will contain one text string: "INCOM.", from which the virus derives its name. Incom is based on the Vienna virus, though unlike Vienna, it does not damage any programs. See: Vienna