F-Secure Virus Information Pages : Lagob [ Summary ] | [ Detailed Description ] | [ Detection ] Name: Lagob Alias: MLS/Lagob.A, Bagoly, Virus.Matlab.Gabol.a, MATL_BAGOLY.A, MatLabScript/Lagob.A Type: Virus Category: Virus Date of Discovery: April 22, 2006 Summary Lagob.A is a simple proof-of-concept script virus written in Matlab. It infects Matlab (.m) files. Detailed Description The Lagob.A virus looks for Matlab files (.m) in the current folder. When it find such files, it tries to infect them by writing its code line by line on top of the file, i.e by prepending its code to the existing .m file. To avoid infecting a file multiple times the virus uses an infection marker and does not try to infect already infected files. The virus does not have any payload or visual effects. Back to the Top Detection F-Secure Anti-Virus detects this malware with the following updates: [FSAV_Database_Version] Version = 2006-04-24_03. Back to the Top Write-up: Katrin Tocheva, April 28, 2006 Technical Details: Katrin Tocheva, April 28, 2006 F-Secure Corporation