F-MEM - Disinfector for the Memorial virus
Copyright (c) 1998 Data Fellows Ltd


OVERVIEW

F-MEM will detect the Memorial virus also known as Clint). This
document gives a brief description of the virus and explains how to
use F-MEM to detect and disinfect this virus.


ABOUT THE MEMORIAL VIRUS

This is a Windows virus which infects DOS COM and EXE files and
Windows EXE files. It uses a VxD driver to stay resident in memory.

Memorial activates on 10th of April. At this time it displays a dialog
box with text:

  Clinton Haines Memorial Virus by Quantum/VLAD and Qark/VLAD

  Clinton Haines, also known as Harry McBungus, Terminator Z and Talon
  died of a drug overdose on his 21st birthday, April the 10th, 1998.
  During his time as a virus writer he wrote the No Frills family,
  X-Fungus, Daemon and 1984 viruses.  He was a good friend to VLAD and
  so we write this virus in his honour.  We hope it's good enough to
  do him justice.

  VLAD Remembers. Rest in Peace

Otherwise the virus just spreads.


HOW TO USE F-MEM

Run F-MEM with the drive letter of directory as a parameter. For example:

        F-MEM C:
        F-MEM C:\DOS

If F-MEM finds the virus you will be notified. If the virus is found
in memory, you have to boot from a clean system diskette first and the
start F-MEM.

Virus analysis and F-MEM by Peter Szor, Data Fellows F-PROT Professional
Development.


LEGAL

F-MEM is protected by international copyright laws. F-MEM is (c)
1998 Data Fellows Ltd, and it is not in public domain or freeware, but
you are free to use and share this software with no charges. You can
not get the source code of this program. You are not allowed to
decompile and reuse the program code of this application. You are not
allowed to resell this software for your own profit (normal copying
costs excluded) or claim to hold rights to this software. Although you
may have the right to use F-MEM, it will remain the exclusive
property of Data Fellows. Data Fellows does not warrant that the
software is error free and we will not cover any costs created by
function or malfunction of this program. Data Fellows also disclaims
liability for possible consequential damages. To purchase a license
for the full F-PROT Professional antivirus toolkit, contact your local
distributor listed in PRO.TXT. Please redistribute F-MEM only with
this documentation. If you cannot agree to these restrictions, you
should not use F-MEM.

Copyright (c) 1998 Data Fellows Ltd, Finland

                 Data Fellows Ltd
                 PL 24
                 FIN-02231 ESPOO
                 FINLAND
                 tel:    +358-9-859 900
                 e-mail: Anti-Virus-Support@DataFellows.com
                 www:    http://www.DataFellows.com/
