This virus activates on Thursday the 12th, popping up a window with a
warning that the next day is Friday the 13th. It pretends to be an
anti-virus program, called VirCheck V1.2
The virus avoids infecting programs with names containing the following
patterns:
SCAN (McAfee's SCAN)
CLEAN (McAfee's CLEAN)
VIR (Various anti-virus programs)
ARJ The ARJ compression program
FLU FLUSHOT+ from Ross Greenberg
COMMAND COMMAND.COM