Virus Name: Uniq
V Status: New
Discovered: July, 1995
Symptoms: .COM file growth
Eff Length: 309 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, VAlert, Sweep, NAV, NAVDX, IBMAV,
ViruScan, PCScan, ChAV,
NAV/N, Sweep/N, NShld, IBMAV/N, AVTK/N, Innoc
Removal Instructions: Delete infected Files
The Uniq or Uniq.308 virus was received in July, 1995. Its origin
or point of isolation is unknown. Uniq is a non-resident, direct
action infector of .COM programs, including COMMAND.COM.
When a program infected with the Uniq virus is executed, this virus
will infect all of the .COM files located in the current directory,
as well as the copy of DOSKEY.COM which is located in the C:\DOS
directory. Infected programs will have a file length increase of
308 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not
be altered. The following text strings are encrypted within the
"[UNiQ](c) 1994 Metal MilitiaImmortal Riot, Sweden"
Known variant(s) of Uniq are:
Uniq.309: Also received in July, 1995, this is a 309 byte variant
of the Uniq virus described above. It behaves in the same way
as the original virus, though the file length increase will be
309 bytes rather than 308. The same text strings are encrypted
within the viral code.
Origin: Unknown July, 1995.