UVR Virus


 Virus Name:  UVR 
 Aliases:     UVR.3124 
 V Status:    New 
 Discovered:  January, 1995 
 Symptoms:    .COM file growth; TSR; 
              file date changed to "3-22-1990"; file time changes 
 Origin:      Unknown 
 Eff Length:  3,124 Bytes 
 Type Code:   PRsCK - Parasitic Resident .COM Infector 
 Detection Method:  ViruScan, NAVDX, NAV, ChAV, AVTK 7.68+, 
                    NShld, NAV/N, AVTK/N 7.68+ 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The UVR or UVR.3124 virus was received in January, 1995.  Its origin 
       or point of isolation is unknown.  UVR is a memory resident infector 
       of .COM files, including COMMAND.COM. 
 
       When the first UVR infected program is executed, this virus will 
       install itself memory resident as a low system memory TSR of 3,440 
       bytes.  Interrupt 21 will be hooked by the virus in memory. 
 
       Once the UVR virus is memory resident, it will infect .COM files, 
       including COMMAND.COM, when they are executed, opened, or copied. 
       Infected .COM files will have a file length increase of 3,124 bytes 
       with the virus being located at the end of the file.  The program's 
       file date in the DOS disk directory listing will have been changed 
       to "3-22-1990" while the file time will be the system time when 
       infection occurred.  The following text strings are visible within 
       the viral code in all infected programs: 
 
               "UVR V.5 Already installed." 
               "MsDos" 
 
       It is unknown what the UVR virus does besides replicate. 

Show viruses from discovered during that infect .

Main Page