Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Fairz


Aliases:


Fairz
Fair, Khobar

Malware
Virus
W32

Summary

Fairz is an encrypted virus that infects COM and EXE files when they are accessed. It has code to display the following message when a specific file is executed:

This is an [ illegal copy ] of KeyPress virus remover
  System Halted


Occasionally Fairz will corrupt files while infecting them. Data Fellows anti-virus products will detect such files as "Damaged Fairz-infected file". Such files will be deleted as they cannot be disinfected.

The virus also contains this text: "Eternal Fairz". These texts are not visible when the virus is examined.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.







Description Created: Mikko Hypponen, F-Secure



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.