Summary

Summary
Action
More Information
| Detected by | All Sophos products |
|---|---|
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
If the Trojan payload has not activated, please use the instructions for removing Trojans.
More Information
Troj/Qzap-248 overwrites the boot sector of the hard disk so that during boot up, the following message is displayed:
NOTICE:
Illegal Microsoft Windows license detected!
You are in violation of the Digital Millennium Copyright Act!
Your unauthorized license has been revoked.
For more information, please call us at:
1-888-NOPIRACY
If you are outside the USA, please look up the correct contact information
on our website, at:
www.bsa.org
Business Software Alliance
Promoting a safe & legal online world.
Troj/Qzap-248 overwrites all other sectors of the hard disk with random bytes, wiping out all information on the hard disk. The Trojan also attempts to do
the same to the floppy drives.
Troj/Qzap-248 is dropped by W32/Opaserv-H, W32/Opaserv-I and W32/Opaserv-K.
