fcl.204
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
FCL.2044
This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are accessed. The virus does not infect files with names HW*, V3*, etc. according to the string (two bytes per name):
HWV3F-J2T2TKTVTBWCCODEVIFIGIRAFEMTBRWI
On December 25, or if the system date is December 3rd 1997, or depending on some system conditions (if some memory resident anti-virus is installed?) the virus erases the CMOS.
The virus contains the text strings:
[FCL virus ] Nice Meet You See Again
NO WORK LAW
Copyright @2006 fcl.204