Low threat Level,
High damage capabilities,
Dangers: Deletes critical files in Windows, Windows\System, and
Windows\System32 directories on the trigger dates of February, or
from December 6 to 31.
Transfers through KaZaA file sharing system only........
Distinguishing Charatceristics:
If any of these follwing files exist in the indicated folders, the
system is infected
Folders:
C:\Program Files\Kazaa\My Shared Folder
C:\Archivos de Programa\Kazaa\My Shared Folder
Filenames:
Cracks.zip .exe
CristinaAguilera.Jpg .exe
Dreaming of You.doc .exe
HackersBook.doc .exe
Hacking tools.zip .exe
Norton Antivirus 2003 Crack.zip .exe
Readme.doc .exe
SilviaSaintDoubleAnalAction.doc .exe
For more info see
http://www.symantec.com/avcenter/venc/data/w32.lorsis.worm.html