Troj/Qzap-248

At the time of writing Sophos has received no reports from users affected by this Trojan. However, we have issued this advisory following enquiries to our support department from customers.

Troj/Qzap-248 overwrites the boot sector of the hard disk so that during boot up, the following message is displayed:

NOTICE:
Illegal Microsoft Windows license detected!
You are in violation of the Digital Millennium Copyright Act!
Your unauthorized license has been revoked.
For more information, please call us at:
1-888-NOPIRACY
If you are outside the USA, please look up the correct contact information
on our website, at:
www.bsa.org
Business Software Alliance
Promoting a safe & legal online world.

Troj/Qzap-248 overwrites all other sectors of the hard disk with random bytes, wiping out all information on the hard disk. The Trojan also attempts to do
the same to the floppy drives.

Troj/Qzap-248 is dropped by W32/Opaserv-H.


more: http://www.sophos.com



Technodrome