Details
Win95.Frone.864

This is a relatively harmless, memory resident parasitic Win9x virus that remains in Win9x memory, hooks IFS API (system-file operations), and infects PE EXE files (Win32 applications) that are being opened.
While infecting, the virus writes itself to the end of the file. In some cases, the file length does not grow if file has overlay data at the end. The infection routine has a bug, and some files cannot be correctly disinfected because of this.
Depending on random conditions, the virus, upon file opening, erases a randomly selected sector on C: drive, and the erased sectors begins with “Fr1, 13″ text.

Related Posts

This entry was posted on Tuesday, July 29th, 2008 at 3:50 pm and is filed under Virus Threats.