Antivirus and Security Software from Sophos

Sophos blogs

WM97/Ortant-A

Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 4 February 2004 10:49:44 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

WM97/Ortant-A an intended virus that attempts to delete the following files:
C:\AUTOEXEC.BAT
C:\WINDOWS\system32\*.*
C:\WINDOWS\explorer.exe
C:\WINDOWS\TASKMAN.EXE
C:\WINDOWS\system32\access.cpl
C:\Program Files\Symantec\S32EVNT1.DLL
C:\Program Files\Symantec\SYMEVENT.INF
C:\Program Files\Symantec\SYMEVENT.SYS
C:\Program Files\Symantec\SYMEVENT.CAT
C:\Program Files\Common Files\Symantec Shared\CCPROXY.EXE
C:\Program Files\Common Files\Symantec Shared\CCAPP.EXE
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\Program Files\Common Files\Symantec Shared\DPHTTP.DLL
C:\Program Files\Common Files\Symantec Shared\CCPWDSVC.EXE
C:\Program Files\Common Files\Symantec Shared\CCSCAN.DLL
C:\Program Files\Common Files\Symantec Shared\CCSET.DLL
C:\Program Files\Common Files\Symantec Shared\CCVRTRST.DLL
C:\Program Files\Common Files\Symantec Shared\CCSETEVT.DLL
C:\Program Files\Common Files\Symantec Shared\IraLsClt.dll
C:\Program Files\Common Files\Symantec Shared\CCWEBWND.DLL
C:\Program Files\Common Files\Symantec Shared\CCPROSUB.DLL
C:\Program Files\Common Files\Symantec Shared\CCLGVIEW.EXE
C:\Program Files\Common Files\Symantec Shared\CCALERT.DLL
C:\Program Files\Common Files\Symantec Shared\CCEMLPXY.DLL
C:\Program Files\Common Files\Symantec Shared\CCERRDSP.DLL
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\*.*
C:\eSafe\Protect\*.*
C:\Program Files\Command Software\F-PROT95\*.*
C:\PC-Cillin 95\*.*
C:\PC-Cillin 97\*.*
C:\Program Files\Quick Heal\*.*
C:\Program Files\FWIN32
C:\Program Files\FindVirus\*.*
C:\Toolkit\FindVirus\*.*
C:\f-macro\*.*
C:\Program Files\McAfee\VirusScan95\*.*
C:\Program Files\Norton AntiVirus\*.*
C:\TBAVW95\*.*
C:\VS95\*.*
C:\*.*
C:\Program Files\Trend Micro\OfficeScan Client\*.*
C:\FFAST317.FF_
C:\WINDOWS\system\SYSTEM.DRV
C:\WINDOWS\system32\sistray.exe
c:\windows\system32\csrss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lasaa.exe
c:\windows\prefetch\SNDSRVC.EXE-12E86B11.pf
c:\windows\system32\svchost.exe
c:\windows\prefetch\NPROTECT.EXE-07DCC9B1.pf
C:\WINDOWS\Prefetch\*.*

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer