Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please read the instructions for disinfecting W32/Flcss.
More Information
On executing an infected file, the file FLCSS.EXE is created in the Windows system folder and executed. This installs the virus in memory. The virus then attempts to infect *.EXE, *.SCR and *.OCX 32-bit Windows files on the local hard drive and network directories.
If this virus is run on Windows NT 4.0 it will patch the files NTLDR and NTOSKRNL.EXE to allow all users unrestricted file access. These files should be restored from the original Service Pack installation media.
