English
Deutsch
Home
Virus Info
MacOS/Leap.A
Search
Home
Support
Solutions
Products
Downloads
Virus Info
Statistics
Phishing Worldmap
VDF History
Virus Science
Submit Sample
Security News
Viruses In the Wild
Company
Press
Partners
Newsletter
MacOS/Leap.A - Malware
See also
Summary
Full description
Statistics
How would you rate this information?
Worthless
Excellent
Virus:
MacOS/Leap.A
CME number:
CME-4
Date discovered:
16/02/2006
Type:
Worm
In the wild:
Yes
Reported Infections:
Low
Distribution Potential:
Low
Damage Potential:
Low
Static file:
File size:
39.596 Bytes
VDF version:
6.33.01.02
- Fri, 17 Feb 2006 06:28 (GMT+1)
General
Method of propagation:
• Messenger
Aliases:
• Symantec: OSX.Leap.A
• Mcafee: OSX/Leap
• Kaspersky: IM-Worm.MSIL.Ltp.a
• Sophos: OSX/Leap-A
• Panda: Trj/Oomp.A!CME-4
Platform / OS:
• Mac
Side effects:
• Drops files
• Drops a malicious file
Files
The following files are created:
– Non malicious files:
• /tmp/pic.gz
• /tmp/pic
– It creates the following archives containing a copy of the malware:
• /tmp/latestpics.tgz
• /tmp/latestpics.tar.gz
• /tmp/apphook.tar
– /tmp/latestpics
– /tmp/hook
– /tmp/apphook
Messenger
Propagation via file
It sends a file with the following name:
• latestpics.tgz
See a brief description
here
.
Description inserted by Alexander Vukcevic on Fri, 17 Feb 2006 08:17 (GMT+1)
Description updated by Alexander Vukcevic on Fri, 17 Feb 2006 08:58 (GMT+1)
»
About Malware
»
About Phishing
»
Viruses In the Wild
« back
Print this page
Worm/Netsky.HB
Worm/Netsky.D.Dam
TR/Crypt.CFI.Gen
W32/Elkern.C
Worm/Mytob.AT
TR/Dldr.Winlagons.BN
TR/ATRAPS.Gen
TR/Dialer.22352.B
TR/Dldr.Adload.MA.3
TR/Dldr.Small.gkm.1
Get comfortable up to the minute info from Avira as
Detects and removes the following malware and its variants:
Worm/Sober.J
Worm/Sober.P
Worm/Sober.Y
W32/Stanit.A
Worm/NetSky.AA
Worm/NetSky.B.1
Worm/NetSky.C
Worm/Netsky.D.Dam
Worm/NetSky.P
Worm/NetSky.X
Worm/Mytob.IN.2
Worm/Mytob.KS
Download here
Click
here
to get the panel...
© 2008 Avira GmbH
Copyright
Privacy
Sitemap
Feedback
Imprint
FAQ
Contact