[thelist] Oooh, nasty
Jon Haworth
jhaworth at witanjardine.co.uk
Tue Jan 8 10:42:05 CST 2002
If you've got Flash on any of your sites, it's worth being aware of this:
> Sophos Anti-Virus IDE alert: SWF/LFM-926
>
> SWF/LFM-926 is the first virus which is capable of infecting
> Shockwave Flash (.SWF) files, commonly used for animation and
> special effects on websites.
>
> When an SWF file is played the virus displays the message
> "Loading.Flash.Movie..." and then it infects other SWF files in
> the current directory.
>
> The virus makes use of the ability of Shockwave files to run
> scripts. In this case it causes the command line interpreter to
> run a debug script which produces a file called V.COM. This file
> is then automatically run by the virus infecting all other SWF
> files in the current directory.
More at http://www.sophos.com/virusinfo/analyses/swflfm926.html or your
favourite AV vendor's site.
Cheers
Jon
More information about the thelist
mailing list