Threat Description

SWF.LFM.926

Details

Aliases: SWF.LFM.926, Flash virus, ACTS.LFM, SWScript.LFM
Category: Malware
Type:
Platform: W32

Summary


SWF.LFM.926 is a Flash infector, infecting Macromedia Flash files with SWF extension.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.



Technical Details


This is the first virus of its kind. However, it is not an urgent threat as the virus can not jump from a web page to an end user machine during normal surfing. The only way it can succesfully spread is that the SWF file is downloaded manually, placed to a directory which contains clean SWF files and then executing the file with Macromedia Flash Player.

SWF.LFM.926 uses the Macromedia Flash's ActionScript scripting system to spread. While infecting other files, it shows a display saying "Loading Flash Movie".

SWF.LFM has not been found in the wild. It is not considered to pose any threat at the moment. Nevertheless, it's the first virus of its kind.

[Mikko Hypponen, F-Secure Corporation, January 8th, 2002]






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More