UVR Virus

Virus Name: UVR Aliases: UVR.3124 V Status: New Discovered: January, 1995 Symptoms: .COM file growth; TSR; file date changed to "3-22-1990"; file time changes Origin: Unknown Eff Length: 3,124 Bytes Type Code: PRsCK - Parasitic Resident .COM Infector Detection Method: ViruScan, NAVDX, NAV, ChAV, AVTK 7.68+, NShld, NAV/N, AVTK/N 7.68+ Removal Instructions: Delete infected files General Comments: The UVR or UVR.3124 virus was received in January, 1995. Its origin or point of isolation is unknown. UVR is a memory resident infector of .COM files, including COMMAND.COM. When the first UVR infected program is executed, this virus will install itself memory resident as a low system memory TSR of 3,440 bytes. Interrupt 21 will be hooked by the virus in memory. Once the UVR virus is memory resident, it will infect .COM files, including COMMAND.COM, when they are executed, opened, or copied. Infected .COM files will have a file length increase of 3,124 bytes with the virus being located at the end of the file. The program's file date in the DOS disk directory listing will have been changed to "3-22-1990" while the file time will be the system time when infection occurred. The following text strings are visible within the viral code in all infected programs: "UVR V.5 Already installed." "MsDos" It is unknown what the UVR virus does besides replicate.