Win32.Orez.6279, W32/Orez.6279, Win32.Orez.6279, W95/Orez, Win32/Orez.6279
PE_OREZ.6279, W32/Orez.6279, Win32.Orez.6279, CRYPT.WIN32
Category: Computer Virus
Active & Spreading
Asia, North and South America, and some parts of Europe and Australia
06 Aug 1999
The W95.Orez virus is an entrypoint-obscuring, polymorphic, Windows virus. It has 2 different payloads.
W95.Orez Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer virus removal tool to automatically clean W95.Orez from your computer.
More details about W95.Orez
The W95.Orez virus is an entrypoint-obscuring, polymorphic, Windows virus. It has 2 different payloads. When the virus is opened, the virus does any of the following, with a 50% possibility for each one of “It contaminates all executable or .exe files in the “\Windows folder” or “It contaminates all executable or .exe files that have Windows Start Menu shortcuts”.
When the virus opens and the day is 13th Friday, the virus will show an error message. The error message has the title "VirusInfo - Ready for infection," and it has what appears to be an error message from the maker of the virus. On 9th of October, the virus goes to an infinite loop, creating messages and threads until the PC crashes, w/out contaminating any files. The message is as follows: “Title: A kiss from” and “Message: A kiss from [name]”.