Summary
When an infected program is run, it will search the whole directory structure of the disk and infect almost every COM-program on disk. This takes time, so Omega is easy to find because programs take much more time to load.
Omega won't infect a file if it is marked read-only.
Omega will activate on every Friday the 13th. It then displays an omega-character ('O') and overwrites the beginning of the first two hard disks in the system, destroying the partition records.
Disinfection & Removal
Allow F-Secure Anti-Virus to disinfect the relevant files.
For more general information on disinfection, please see Removal Instructions.
Submit a sample
Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)
F-Secure Community
Give advice. Get advice. Share the knowledge on our free discussion forum.