F-Secure: Be Sure
Main
F-Secure Logo - Be Sure
Select local site


Privacy Policy
Legal Notices
Contact Us

F-Secure Virus Descriptions : Fairz





NAME:Fairz
TYPE:Resident COM/EXE-files
SIZE:2083
ALIAS:Fair, Khobar
REPAIR:Yes

Fairz is an encrypted virus that infects COM and EXE files when they are accessed. It has code to display the following message when a specific file is executed:

  This is an [ illegal copy ] of KeyPress virus remover
  System Halted

Occasionally Fairz will corrupt files while infecting them. Data Fellows anti-virus products will detect such files as "Damaged Fairz-infected file". Such files will be deleted as they cannot be disinfected.

The virus also contains this text: "Eternal Fairz". These texts are not visible when the virus is examined.

[Analysis: Mikko Hypponen, F-Secure]