Home / malware

PDF

Worm:ALisp/Copicad.B

First posted on 23 June 2019.
Source: Microsoft

Aliases :

Worm:ALisp/Copicad.B is also known as ALS/Bursted, Trojan.Acad.Bursted.c, ACAD.Bursted.11, ALS/Bursted.E, Virus.Acad, Virus.Acad.Bursted.e, ALS/Bursted, ACAD/Bursted.N, AL/Bursted.F, ALS.Bursted.B, ACM_BURSTED.AX.

Explanation :

Virus:ALisp/Bursted.AD is a script virus written in AutoLisp for AutoCAD, a computer-aided drafting application. The virus infects other AutoLisp script files having a file extension ".lsp". InstallationThe script virus searches for the default folder for "acad.lsp" by reading the file "base.dcl". The virus then identifies the folder of an opened drawing file ("file name.dwg") by getting the value of an environment variable named "dwgname". The virus drops an infected file as "acaddoc.lsp" into the default folder and also into every folder of a currently opened .DWG file.  Analysis by Jingli Li

Last update 23 June 2019

 

TOP