Backdoor.Lala

Backdoor.Lala is a Trojan Horse that allows unauthorized access to a compromised computer. The Trojan opens TCP/UDP port 4627, 1149, or 1877 to allow remote access. The Trojan attempts to steal confidential information (such as cached passwords and cookies), log keystrokes, and allow for remote file execution.

Backdoor.Lala is written in the Borland Delphi programming language and is compressed with tElock.

Note: The W32.Sobig.A@mm worm can download Backdoor.Lala.

Protection

• Initial Rapid Release version December 23, 2002
• Latest Rapid Release version July 27, 2009 revision 085
• Initial Daily Certified version December 23, 2002
• Latest Daily Certified version July 27, 2009 revision 073
• Initial Weekly Certified release date December 24, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: High

Distribution

• Distribution Level: Low