FUNLOVE VIRUS

Information about Funlove virus:

This virus infects 32 bit Windows Executable PE files under Windows 95, Windows 98 and Windows NT. When an infected file is run, the virus stays resident in memory and creates a file FLCSS.EXE, which is a dropper file under Windows System directory.

The infection procedure searches for all the local drives for PE files and infects all type of extensions that have PE format. It infects mapped network drive file, if user has write permission.This virus inserts the following string in the infected file

~Fun Loving Criminal~

Funlove will not infect the files that are starting from following FOUR letters

ALER, AMON, AVP3, AVPM, DDHE, DPLA, F-PR, MPLA, NAVW, SCAN, SMSS

Funlove virus first appeared in November 1999


Other names of Funlove virus:
This worm is also known as Win32.FLC.