Alert! W32.Liac.A@mm

Discussion in 'malware problems & news' started by Marianna, Jul 8, 2002.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    WARNING: W32.Liac.A@mm
    Threat level: Category 3
    Type:
    Worm
    Virus Definitions: July 8, 2002 or later

    What is W32.Liac.A@mm and how does it affect me?
    W32.Liac.A@mm is a mass-mailing worm. When executed, the worm first displays the following message:
    Message: Error54: Media Player not installed correctly

    W32.Liac.A@mm also attempts to use Microsoft Outlook to send emails to all contacts in the Windows Address Book.

    The email includes the following text:

    Subject: FW:FW: LILAC project video attach
    Message: Things that the govt. dont want you to know
    Attachment: LILAC_WHAT_A_WONDERFULNAME.avi.exe

    The worm has been packed using a known executable file packer.The size of the worm is about 12 KB packed and about 40 KB unpacked.

    http://www.symantec.com/avcenter/venc/data/w32.liac.a@mm.html
     
  2. FanJ

    FanJ Guest

    Hi Marianna,

    See also:
    http://www.wilderssecurity.com/showthread.php?t=2234

    I admit: They don't make it easy with all those different names for the same thing.... ;)
     
  3. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Hi Jan,

    thanks ;) I just got the "Alert" from Symantec and couldn't find the name :(

    Well, now you know that this "beast" is upgraded to a category 3 ;)
     
  4. FanJ

    FanJ Guest

    Hi Marianna,

    I just went to that Symantec site that you mentioned; have a look ;):

    W32.Liac@mm,
    WORM_LIAC.A [Trend]
    W32/Calil-A [Sophos]
    W32/Liac@MM [McAfee]

    PS:
    I tried to repair that link, but I was not able to do that; I guess the reason is that @ somewhere in the link.......
     
  5. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
  6. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hi Marianna,

    Jan is right here: the "at" sign is causing trouble. Apologies: can't be avoided :rolleyes:

    regards,

    paul
     
  7. FanJ

    FanJ Guest

    Here is the link, but it is not clickable: you have to copy and paste to get there.

     
Thread Status:
Not open for further replies.