Home / malwarePDF  

Virus:ALisp/Passdoc.A


First posted on 10 May 2010.
Source: SecurityHome

Aliases :

Virus:ALisp/Passdoc.A is also known as Virus.ALS.Pasdoc.a (Kaspersky), ACAD/Bursted.B (AVG), ACAD/Bursted.B.1 (Avira), ACAD.Pasdoc (Dr.Web), ALS/Pasdoc.A (ESET), Virus.ALS.Pasdoc (Ikarus), ALS/Bursted (McAfee), ACAD/Bursted.I (Panda), AL/Billy-A (Sophos), ALS.Bursted.B (Symantec), ACM_BURSTED.AV (Trend Micro).

Explanation :

Virus:ALisp/Passdoc.A is an AutoLISP script virus that targets installations of Autocad software.
Top

Virus:ALisp/Passdoc.A is an AutoLISP script virus that targets installations of Autocad software. It arrives on a user's computer with the name "acaddoc.lsp", usually along with infected Autocad projects. It is automatically executed when an Autocad drawing file is opened. When run it performs the following actions:

  • copies itself to all .mnl files in the folder containing the "acad.mnl" file
  • copies itself to all .lsp files in the subfolder "support" whose parent folder contains the "acad.exe" file


    • Analysis by Marian Radu

    Last update 10 May 2010

     

    TOP

    Malware :

    Family: