Interceptor Virus

Virus Name: Interceptor Aliases: 1014 V Status: Rare Discovered: September, 1991 Symptoms: .COM file growth Origin: Italy Eff Length: 1,014 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, ChAV, NAV, IBMAV, NAVDX, VAlert, PCScan, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: Delete infected files General Comments: The Interceptor virus was received in September, 1991, and is originally from Milan, Italy. Interceptor is based on the Vienna virus, and like Vienna, is a non-resident infector of .COM programs, including COMMAND.COM. When a program infected with Interceptor is executed, Interceptor will search the current directory to locate the first two uninfected .COM files. These two files will then be infected. If an uninfected COMMAND.COM program is found as one of the first two uninfected .COM files, it will be infected. Programs infected with Interceptor will increase in size by 1,014 bytes. Interceptor will be located at the end of the infected programs. The following text strings can be found near the end of all infected files: "Interceptor - by Cracker Jack 1991 IVRL Milan, Italy" "*.com" "????????COM" It is unknown if Interceptor does anything besides replicate. This virus appears to be a research virus at the time of its original submission. See: Vienna