Home / malware

PDF

Worm:ALisp/Copicad.gen!A

First posted on 13 January 2012.
Source: Microsoft

Aliases :

There are no other names known for Worm:ALisp/Copicad.gen!A.

Explanation :

Worm:ALisp/Copicad.gen!A is a generic detection for worms that target AutoCAD software. It replaces the contents of an AutoCAD file with its own.
Top

Worm:ALisp/Copicad.gen!A is a generic detection for worms that target AutoCAD software. It replaces the contents of an AutoCAD file with its own.

It arrives in the computer along with a drawing file (DWG). When the DWG file is launched, Worm:ALisp/Copicad.gen!A is automatically loaded and executed by AutoCAD.

Once executed, it searches for the file 'base.dcl' in the AutoCAD path. If located, Worm:ALisp/Copicad.gen!A looks for the file 'acaddoc.lsp' in the same folder. It then replaces the contents of the AutoCAD file 'acaddoc.lsp' with its own content.



Analysis by Ray Roberts

Last update 13 January 2012

 

TOP