FunLove
 
Short description (11/99)

FunLove is a classical Win32 virus which is able to infect Windows 95, Windows 98 and Windows NT executables. What makes it interesting is that, when it is run under administrator privilege, it is able to patch the Windows NT kernel in a way that gives ANY user full administrator rights.
Anecdotical Information


On the 23rd of April 2001, Microsoft admitted delivering FunLove infected security updates to its Gold and Premier partners.

See this Register story for more details.


DataRescue 45 quai de la Dérivation 4020 Liège (Belgium) tel 32-4-3446510 fax 32-4-3446514 Please send us your questions or comments.