high
Summary
Summary
Action- More Information
| Protection available since | 11 February 2004 17:26:27 (GMT) |
|---|---|
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting PE executables.
Please contact technical support.
More Information
W32/Order-A is a companion virus that attempts to move EXE files into the <Windows>\Fonts folder and overwrite the original file with itself. The files in the fonts folder will be called <original filename>.chaos. The original extension will be lost.
Note that files in the Fonts folder cannot be seen using Explorer but can be seen from the command prompt.
W32/Order-A may drop a file called Chaos.txt which contains the following text:
Do you believe in a god that satisfies
Do you believe in a god that opens eyes
Do you believe in a god that tells you lies
Or do you believe in me?
Do you believe in a god that brings you down
Do you believe in a god that wears a crown
Do you believe in a god that makes you bow
Or do you believe in me?
~ Marco V - Godd
[Chaos] created by Xevion
The lyrics are from a song called "Godd" by Marco V, a DJ based in the Netherlands.
|
