Lerma

Lerma Description


Lerma is a destructive Internet worm that spreads by e-mail and through unprotected network shares. The spyware is designed to overwrite all archives, images, screensavers, web pages, documents, multimedia and computer files it finds on a compromised PC with executable copies of itself. As a result the user can lose valuable personal information. Lerma automatically runs on every Windows startup.
Download SpyHunter Spyware Scanner

Lerma Automatic Detection Tool (Recommended)


Is your PC infected with Lerma? To safely & quickly detect Lerma, we highly recommend you run the malware scanner listed below.



File System Modifications

  • The following files were created in the system:
    # File Name
    1 csrss.exe
    2 ermasys32.exe
    3 kernel32.exe
    4 lasiaf.exe
    5 mode.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunLasErmaHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesLasErma
Posted: March 28, 2006 | By
Share:
Follow Me on Pinterest More More
Threat Level: 5/10
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Rate this article:

Leave a Reply

What is 6 + 15 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)