Discussion in 'malware problems & news' started by Technodrome, Jan 2, 2003.

Thread Status:
Not open for further replies.
  1. Technodrome

    Technodrome Security Expert

    Feb 13, 2002
    New York
    At the time of writing Sophos has received no reports from users affected by this Trojan. However, we have issued this advisory following enquiries to our support department from customers.

    Troj/Qzap-248 overwrites the boot sector of the hard disk so that during boot up, the following message is displayed:

    Illegal Microsoft Windows license detected!
    You are in violation of the Digital Millennium Copyright Act!
    Your unauthorized license has been revoked.
    For more information, please call us at:
    If you are outside the USA, please look up the correct contact information
    on our website, at:
    Business Software Alliance
    Promoting a safe & legal online world.

    Troj/Qzap-248 overwrites all other sectors of the hard disk with random bytes, wiping out all information on the hard disk. The Trojan also attempts to do
    the same to the floppy drives.

    Troj/Qzap-248 is dropped by W32/Opaserv-H.


Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.