Troj/Qzap-248

Discussion in 'malware problems & news' started by Technodrome, Jan 2, 2003.

Thread Status:
Not open for further replies.
  1. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    At the time of writing Sophos has received no reports from users affected by this Trojan. However, we have issued this advisory following enquiries to our support department from customers.

    Troj/Qzap-248 overwrites the boot sector of the hard disk so that during boot up, the following message is displayed:

    NOTICE:
    Illegal Microsoft Windows license detected!
    You are in violation of the Digital Millennium Copyright Act!
    Your unauthorized license has been revoked.
    For more information, please call us at:
    1-888-NOPIRACY
    If you are outside the USA, please look up the correct contact information
    on our website, at:
    www.bsa.org
    Business Software Alliance
    Promoting a safe & legal online world.

    Troj/Qzap-248 overwrites all other sectors of the hard disk with random bytes, wiping out all information on the hard disk. The Trojan also attempts to do
    the same to the floppy drives.

    Troj/Qzap-248 is dropped by W32/Opaserv-H.


    more: http://www.sophos.com



    Technodrome
     
Thread Status:
Not open for further replies.