[thelist] Oooh, nasty

[Jon Haworth]

If you've got Flash on any of your sites, it's worth being aware of this:

> Sophos Anti-Virus IDE alert:  SWF/LFM-926
> 
> SWF/LFM-926 is the first virus which is capable of infecting
> Shockwave Flash (.SWF) files, commonly used for animation and
> special effects on websites.
> 
> When an SWF file is played the virus displays the message
> "Loading.Flash.Movie..." and then it infects other SWF files in
> the current directory. 
> 
> The virus makes use of the ability of Shockwave files to run
> scripts. In this case it causes the command line interpreter to
> run a debug script which produces a file called V.COM. This file
> is then automatically run by the virus infecting all other SWF
> files in the current directory.

More at http://www.sophos.com/virusinfo/analyses/swflfm926.html or your
favourite AV vendor's site.


Cheers
Jon