Uniq Virus

Virus Name: Uniq Aliases: Uniq.308 V Status: New Discovered: July, 1995 Symptoms: .COM file growth Origin: Unknown Eff Length: 309 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: F-Prot, AVTK, VAlert, Sweep, NAV, NAVDX, IBMAV, ViruScan, PCScan, ChAV, NAV/N, Sweep/N, NShld, IBMAV/N, AVTK/N, Innoc Removal Instructions: Delete infected Files General Comments: The Uniq or Uniq.308 virus was received in July, 1995. Its origin or point of isolation is unknown. Uniq is a non-resident, direct action infector of .COM programs, including COMMAND.COM. When a program infected with the Uniq virus is executed, this virus will infect all of the .COM files located in the current directory, as well as the copy of DOSKEY.COM which is located in the C:\DOS directory. Infected programs will have a file length increase of 308 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text strings are encrypted within the viral code: "[UNiQ](c) 1994 Metal MilitiaImmortal Riot, Sweden" "c:\dos\doskey.com *.com" Known variant(s) of Uniq are: Uniq.309: Also received in July, 1995, this is a 309 byte variant of the Uniq virus described above. It behaves in the same way as the original virus, though the file length increase will be 309 bytes rather than 308. The same text strings are encrypted within the viral code. Origin: Unknown July, 1995. See: MMIR