Threat Description

Reiz

Details

Aliases: Reiz, Reizfaktor
Category: Malware
Type: Virus
Platform: W97M

Summary


W97M/Reiz is a destructive Word trojan.

When a trojan document is opened, it creates a batch file, "Autoexek.bat", and an AutoRun file to the root of the "C:" drive.

When Windows is restarted, the AutoRun is enabled and when the "C:" drive is accessed via Windows Explorer or My Computer the batch file is executed.

The batch file shows a message:

  Updating! This May Take A While...     Please Wait...  

and then attempts to remove everything from the "C:" drive using "Deltree" command.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.







Technical Details:Sami Rautiainen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More