Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

W32/Order-A

Feb 11, 2004 1:47AM PST

Type
Win32 executable file virus

Description
W32/Order-A is a companion virus that attempts to move EXE files into the <Windows>\Fonts folder and overwrite the original file with itself. The files in the fonts folder will be called <original filename>.chaos. The original extension will be lost.
Note that files in the Fonts folder cannot be seen using Explorer but can be seen from the command prompt.


More: http://www.sophos.com/virusinfo/analyses/w32ordera.html

Discussion is locked