Alert! W32.Liac.A@mm

WARNING: W32.Liac.A@mm
Threat level: Category 3
Type:
Worm
Virus Definitions: July 8, 2002 or later

What is W32.Liac.A@mm and how does it affect me?
W32.Liac.A@mm is a mass-mailing worm. When executed, the worm first displays the following message:
Message: Error54: Media Player not installed correctly

W32.Liac.A@mm also attempts to use Microsoft Outlook to send emails to all contacts in the Windows Address Book.

The email includes the following text:

Subject: FW:FW: LILAC project video attach
Message: Things that the govt. dont want you to know
Attachment: LILAC_WHAT_A_WONDERFULNAME.avi.exe

The worm has been packed using a known executable file packer.The size of the worm is about 12 KB packed and about 40 KB unpacked.

http://www.symantec.com/avcenter/venc/data/w32.liac.a@mm.html

 

Hi Marianna,

See also:
http://www.wilderssecurity.com/showthread.php?t=2234

I admit: They don't make it easy with all those different names for the same thing....

 

Hi Jan,

thanks I just got the "Alert" from Symantec and couldn't find the name

Well, now you know that this "beast" is upgraded to a category 3

 

Hi Marianna,

I just went to that Symantec site that you mentioned; have a look :

W32.Liac@mm,
WORM_LIAC.A [Trend]
W32/Calil-A [Sophos]
W32/Liac@MM [McAfee]

PS:
I tried to repair that link, but I was not able to do that; I guess the reason is that @ somewhere in the link.......

 

Jan,

what I posted was from an e-mail from Symantec.

I try the link again:

http://www.symantec.com/avcenter/venc/data/w32.liac.a@mm.html

That's strange.... w32.liac.A@mm.html put itsself on top of the URL as I look in "preview"

 

Here is the link, but it is not clickable: you have to copy and paste to get there.