FSN Virus
Virus Name: FSN
Aliases: FSN.1279.B
V Status: New
Discovered: January, 1997
Symptoms: .COM growth growth; file date/time changes;
message displayed
Origin: Unknown
Eff Length: 1,279 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: AVTK, NAV, NAVDX, ViruScan 3.02+,
AVTK/N, NAV/N
Removal Instructions: Delete infected files
General Comments:
The FSN or FSN.1279.B virus was received in January, 1997. Its
origin or point of isolation is unknown. FSN is a non-resident,
direct action infector of .COM files, including COMMAND.COM.
When a program infected with the FSN virus is executed, this virus
will attempt to infect all of the .COM files located in the current
directory of the A:, B:, and C: drives. It will also at this time
display the following message on the system display:
"Have you voted F.S.N.?
Well, you can fuck it now ..."
Programs infected with the FSN virus will have a file length increase
of 1,279 bytes with the virus being located at the end of the file.
The program's date and time in the DOS disk directory listing will
have been updated to the current system date and time when infection
occurred. The following text strings are visible within the viral
code:
"*.COM FSN"
"FSN"