Uniq Virus


 Virus Name:  Uniq 
 Aliases:     Uniq.308 
 V Status:    New 
 Discovered:  July, 1995 
 Symptoms:    .COM file growth 
 Origin:      Unknown 
 Eff Length:  309 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method: F-Prot, AVTK, VAlert, Sweep, NAV, NAVDX, IBMAV, 
                   ViruScan, PCScan, ChAV, 
                   NAV/N, Sweep/N, NShld, IBMAV/N, AVTK/N, Innoc 
 Removal Instructions:  Delete infected Files 
 
 General Comments: 
       The Uniq or Uniq.308 virus was received in July, 1995.  Its origin 
       or point of isolation is unknown.  Uniq is a non-resident, direct 
       action infector of .COM programs, including COMMAND.COM. 
 
       When a program infected with the Uniq virus is executed, this virus 
       will infect all of the .COM files located in the current directory, 
       as well as the copy of DOSKEY.COM which is located in the C:\DOS 
       directory.  Infected programs will have a file length increase of 
       308 bytes with the virus being located at the end of the file.  The 
       program's date and time in the DOS disk directory listing will not 
       be altered.  The following text strings are encrypted within the 
       viral code: 
 
           "[UNiQ](c) 1994 Metal MilitiaImmortal Riot, Sweden" 
           "c:\dos\doskey.com *.com" 
 
       Known variant(s) of Uniq are: 
       Uniq.309: Also received in July, 1995, this is a 309 byte variant 
           of the Uniq virus described above.  It behaves in the same way 
           as the original virus, though the file length increase will be 
           309 bytes rather than 308.  The same text strings are encrypted 
           within the viral code. 
           Origin:  Unknown  July, 1995. 
 
       See:   MMIR 

Show viruses from discovered during that infect .

Main Page