Alert! W32.Liac.A@mm

Discussion in 'malware problems & news' started by Marianna, Jul 8, 2002.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    WARNING: W32.Liac.A@mm
    Threat level: Category 3
    Type:
    Worm
    Virus Definitions: July 8, 2002 or later

    What is W32.Liac.A@mm and how does it affect me?
    W32.Liac.A@mm is a mass-mailing worm. When executed, the worm first displays the following message:
    Message: Error54: Media Player not installed correctly

    W32.Liac.A@mm also attempts to use Microsoft Outlook to send emails to all contacts in the Windows Address Book.

    The email includes the following text:

    Subject: FW:FW: LILAC project video attach
    Message: Things that the govt. dont want you to know
    Attachment: LILAC_WHAT_A_WONDERFULNAME.avi.exe

    The worm has been packed using a known executable file packer.The size of the worm is about 12 KB packed and about 40 KB unpacked.

    http://www.symantec.com/avcenter/venc/data/w32.liac.a@mm.html
     
  2. FanJ

    FanJ Guest

    Hi Marianna,

    See also:
    http://www.wilderssecurity.com/showthread.php?t=2234

    I admit: They don't make it easy with all those different names for the same thing.... ;)
     
  3. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Hi Jan,

    thanks ;) I just got the "Alert" from Symantec and couldn't find the name :(

    Well, now you know that this "beast" is upgraded to a category 3 ;)
     
  4. FanJ

    FanJ Guest

    Hi Marianna,

    I just went to that Symantec site that you mentioned; have a look ;):

    W32.Liac@mm,
    WORM_LIAC.A [Trend]
    W32/Calil-A [Sophos]
    W32/Liac@MM [McAfee]

    PS:
    I tried to repair that link, but I was not able to do that; I guess the reason is that @ somewhere in the link.......
     
  5. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
  6. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hi Marianna,

    Jan is right here: the "at" sign is causing trouble. Apologies: can't be avoided :rolleyes:

    regards,

    paul
     
  7. FanJ

    FanJ Guest

    Here is the link, but it is not clickable: you have to copy and paste to get there.

     
Loading...
Similar Threads
  1. Minimalist
    Replies:
    0
    Views:
    405
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.