Discussion in 'malware problems & news' started by Randy_Bell, Jun 4, 2004.

Thread Status:
Not open for further replies.
  1. Randy_Bell

    Randy_Bell Registered Member

    May 24, 2002
    Santa Clara, CA
    WORM_LAMUD.A is a recently discovered worm that, among other capabilities, can reset a user's wallpaper to one of three preset images during the month of June. This worm spreads via network shares, searching for writeable network shares and dropping a copy of itself in the root of shared directories and folders as "GAME.EXE".

    This worm opens a Windows Explorer window to the Windows directory upon its execution, and disables registry modification and configuration dialogs, which prevent the affected user from viewing the hidden files and preventing access to the registry editing tools. When the system month is June, WORM_LAMUD.A drops the file ACD WALLPAPER.BMP into the Windows directory and then sets this as the wallpaper. Each execution of the malware rotates the wallpaper between three preset images.

    This worm's code also contains the following text:
    "Lamers Must Die!"
    "Programmers Forever!"

    This worm is currently in-the-wild and affects Windows 95, 98, ME, NT, 2000, and XP operating systems.

    If you would like to scan your computer for WORM_LAMUD.A or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus scanner at: http://housecall.trendmicro.com

    WORM_LAMUD.A is detected and cleaned by Trend Micro pattern file #896 and above.
Thread Status:
Not open for further replies.