| ID | 9703 |
| Released | Aug 12, 2003 |
| Description Updated | Feb 23, 2005 |
Detection Availability
| FortiGate | |
|---|---|
| Extreme |
|
| FortiClient | |
| Extended |
|
| FortiMail | |
| Extended |
|
| FortiSandbox | |
| Extended |
|
| FortiWeb | |
| Extended |
|
| Web Application Firewall | |
| Extended |
|
| FortiIsolator | |
| Extended |
|
| FortiDeceptor | |
| Extended |
|
| FortiEDR |
|
Threat Profile
Aliases:- W32.Xorala
- W32/Harmony.A
- W32/Rox-A
- W32/Xoro
- Win32.Valhalla.2048
- Win32/Valla.2048
Win32 file format / PE 32 bit
Update History
| Date | Version | Detail |
|---|---|---|
| 2023-08-08 | 91.05844 | |
| 2023-06-20 | 91.04373 | |
| 2023-06-13 | 91.04163 | |
| 2023-05-30 | 91.03736 | |
| 2023-05-16 | 91.03316 | |
| 2023-05-09 | 91.03106 | |
| 2023-05-02 | 91.02896 | |
| 2023-04-25 | 91.02686 | |
| 2023-04-18 | 91.02476 | |
| 2023-04-12 | 91.02293 |
Refine Search
Threat Encyclopedia
W32/Valla.A
Analysis
- Detection to be included into Fortinet Virus Update
August 12, 2003
- Virus is 32bit and appends itself to 32bit EXE
files
- Virus body is 2048 bytes and exists in a section
created named "XOR"
- Virus infects files on Windows 98/ME/2000
and attempts to infect files run or accessed on the
infected system
- The virus contains the following text in its code
-
-= XOR 2009 Valhalla =- Assembled 1997 .. Activated 07.2002 - devoted for peace and harmony in universe against war, racism, terrorism and cruel brutality .. remember .. life is the most important thing - not money .. it's time for a revolution NOW ....
Recommended Action
Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option
