Know Your Malware - Lerma Worm Removal

Lerma is a destructive Internet worm that spreads by e-mail and through unprotected network shares. The parasite is designed to overwrite all archives, images, screensavers, web pages, documents, multimedia and system files it finds on a compromised computer with executable copies of itself. As a result the user can lose valuable personal information. Lerma automatically runs on every Windows startup.

Related files: csrss.exe, ermasys32.exe, kernel32.exe, lasiaf.exe, mode.exe

Lerma properties:
Hides from the user
Stays resident in background Remove Lerma, removal instructions

Linked by shanmuga Thursday, 27th October 2005 1:33PM