1. Symantec/
  2. Security Response/
  3. W32.Lorac


Risk Level 1: Very Low

August 21, 2003
February 13, 2007 12:08:54 PM
Also Known As:
Backdoor.Lorac, Worm.Win32.Eyeveg.a [AVP], W32/Eyeveg.worm [McAfee]
Systems Affected:

W32.Lorac is a network aware worm that allows remote control of an infected system, via HTTP.

This worm has been distributed as an email attachment named Message.zip. An HTML file, which contains the worm, exists inside the zip file. The worm takes advantage of a vulnerability described in MS03-14, which allows for the execution of a MIME-encoded program inside an HTML file.

NOTE: Definitions dated prior to Octomer 9, 2003 may detect this as Backdoor.Lorac.

Antivirus Protection Dates

  • Initial Rapid Release version August 22, 2003
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version August 22, 2003
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date August 27, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Heather Shannon

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube