Flor virus information
This page provides information about the Flor virus.
Virus information
01/31/2001 - The Flor virus is a memory resident trojan written in Visual Basic. The Visual Basic runtime files VBRUN500.DLL and higher are required for this program to function. Once the program is loaded into memory, every 60 seconds, it attempts to copy itself to "A:\Pornografia.exe" and to "c:\windows\menu iniciar\programas\iniciar\" (Portuguese startup folder). Additionally, the trojan attempts to go to an URL (uniform resource locator) in the www3.cybercities.com domain.
Symptoms
Floppy drive activity regardless of the presence of a diskette.
File Pornografia.exe being present on floppy diskettes or on the hard drive.
How to clean virus
Obtain the latest update DAT file from antivirus scanner companies page and use the antivirus scanner to clean the hard drive.