Malware type: Worm

Aliases: Trojan-Dropper.Win32.Delf.cq (Kaspersky), W32/Lamud.worm.gen (McAfee), Trojan.Lamud (Symantec), TR/Drop.Delf.CQ (Avira), W32/Lamud-A (Sophos),

In the wild: Yes

Destructive: Yes

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This worm spreads via network shares. It searches for writeable network shares and drops a copy of itself in the root of the shared directories or in certain folders.

It also drops a copy of itself as GAME.EXE in Drives A and B.

This worm makes several modifications to the system registry to prevent the user from configuring the desktop and modifying the registry.

When the system month is June, it drops the file ACD WALLPAPER.BMP in the Windows directory and then sets this as wallpaper.

It deletes the following system files:

• REGEDIT.EXE
• REGEDIT32.EXE
• DESC.CPL
• MSCONFIG.EXE

This worm runs on Windows 95, 98, ME, NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 29, 2004 6:30:35 PM GMT -0800
Description updated: May. 31, 2004 12:47:36 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.