Email-Worm.Win32.LaconYouTube↗  IA↗(long shot)
Entertainment  104.1K views 3K likes 26 dislikes   16 Jul 2017
danooct1 318K subscribers United States YouTube↗


Please select the problem
You must specify your email and describe the problem in detail
Describe your problem in detail if it's not obvious

Contributed subtitles
English me when i
Chinese Hedwig Zheng
Click to Play Video Click to Play Video
hello everyone today we're taking a look
Hello everyone, today we're taking a look at Lacon.
at Lacan a worm that spreads over email peer-to-peer networks and mirc the worm
A worm that spreads over e-mail, Peer to Peer networks and mIRC.
also has a pretty funny payload so we're
The worm also has a pretty funny payload.
going to go ahead and get straight into
So we're gonna go ahead and get straight into it.
it when we run it will see that it sends
When we run it,
emails we check it they purport to be
we'll see that it sends emails. If we check it,
from the National no call registry info
They purport to be from the National No Call Registry Info.
so it says I just saw this on the local
So it says: "I just saw this on the local news,"
news you can add yourself to this national no call list so telemarketer
"You can add yourself to this National No Call List so telemarketers stop calling."
stop calling I just did it it's real
"I just did it, it's real easy."
easy just click on the attachment to add
"Just click on the attachment to add yourself!"
yourself see you soon know call list exe
"See you soon!" No Call List.exe.
and if we check the spider doggie one
And if we check the Spider Doggy one.
it's slightly different and ends with
It's slightly different.
love yeah and you still get the no call
And ends with: "Love ya!"
list of exe and we can also see close
And you still get the No Call List.exe And we can also see,
out of this that our fake shared folder
close out of this, that our fake Shared Folder for Kazaa,
for Casa is now filled with awesome
is now filled with,
stuff like a m-- password hack thousand
awesome stuff like "AIM Password Hack"
porn site passwords ad-aware 6.0
"1000 Porn Site Passwords"
battlefield 1942 seeker opens World War
"Ad-aware 6.0" "Battlefield 1942"
2 serial o to roam a trainer we got mad
"Secret Weapons of World War II Serial." "Road to Rome,"
and Nero mirc Return to Castle
"a trainer" We got "Madden." Nero, mIRC.
Wolfenstein all sorts of stuff you might
"Return to Castle Wolfenstein"
want so you go on to Kazaa you search
And all sorts of stuff you might want,
for you pirate it and you get infected
so you go on to Kazaa, so you go on to Kazaa, you search for it, so you go on to Kazaa, you search for it, you pirate it!
so aside from the storm also drops its
And you get infected. So aside from this, the worm drops its files.
files into the Windows System directory
Into the Windows System directory.
go ahead and get into this and right
Go ahead and get into this.
towards the top we have B and D T 32
And right towards the top we have "Bndt32"
this is the worm and then drops its text
this is the worm, and it drops its text file, that says:
file that says the date has been done
"The deed has been done."
when 32 dot H ll w dot no call by demand
"W32.HLLW.NoCall by DimenZion."
jump cool name cool worm with a funny payload
Cool name,
so let's go ahead and get to that so if
cool worm with a funny payload, so let's go ahead and get to that.
the worm is run on the tenth of any
So if the worm is run on the 10th of any month,
month we will see the following habit
we will see the following happen.
computer tells you you're angry computer
Computer tells you: "Your Angry Computer"
all I do is work work or I quit you
"All I do is work, work, work.. I quit!"
press ok the worm logs you off and ends
You press OK,
all your processes if we press ok and
the worm logs you off, and ends all your processes.
log right back in we see all I do is
If we press OK, and log right back in,
work work work I quit again
We see: "All I do is work, work, work.. I quit!" again.
if we press ok on this one so it cannot
And if we press OK on this one,
quit because there's a second message
says: "Cannot quit."
and if we press ok on this it will log
'cause it's the second message. And if we press OK on this then it will log us off.
us off however after this has happened
However, after this has happened,
if we want to Internet Explorer our home page has been replaced with homestar
If we run Internet Explorer, our homepage has been replaced.
runner what's going on you what's
With "Homestar Runner" [Homestar]: "Umm," [Homestar]: "What's going on here?"
happened to my website the system is
[Homestar]: "What happened to my website?"
down yo hello this is yo why why I think
[Strongbad]: "The system is down, yo!" [Homestar]: "Ohhh, the system! Right. Right."
the many people trying to log on sorry
[Strongbad]: "Yeah! I think too many people tried to log on!"
about that
[Strongbad]: "Umm, sorry about that."
what are you trying for my website I
[Homestar]: "What are you sorry for?" [Homestar]: "It's my website."
don't think they're coming to see you
[Strongbad]: "Umm,"
all star what you think everybody's
[Strongbad]: "I don't think they're going to see you, Homestar."
target ID you watch the tape leg yeah
[Homestar]: "What, you think everybody's logging on to watch 'tape-leg'?"
thank you good would I shut up that that
[Homestar]: "Yeah, that's a good one."
leg is cool well where do I get my
[Strongbad]: "Hey, shut up!" [Strongbad]: "The 'tape-leg' is cool!"
website back Oh ain't done now
[Homestar]: "Well, when do I get my website back?"
we've got our top men working on it round the clock well I've found a
[Strongbad]: "Oh, any time now." [Strongbad]: "We got our top men on it round-the-clock!"
problem looks like somebody tried to grab a lemon Swiss cake rolls into the
[Bubs]: "Well I found the problem!" [Bubs]: "Looks like somebody tried to cram-a-lam a Swiss Cake Roll into the disk drive!"
describe oh really
[Homestar]: "Oh, really?"
what are you looking at me for art oh man
[Strongbad]: "Uh, what are you looking at me for? I did-hut-wut-nany-huit-"
so as it says nothing is ruined going
[Homestar]: "So, Bubs.." So, as it says, nothing is ruined.
next out of this as it just redirects to
We're gonna exit out of this as it just redirects to the Homestar page.
the Homestar page and press ok again
And, if we press OK again,
computer just logs off so that is really
the computer just logs off.
about it for the lacan worm it's not at
So, that is really about it for the Lacon worm.
all damaging does not go after your
It's not at all damaging.
files and all it does is kind of mess
Does not go after your files.
with you on the 10th of every month so
All it does is mess with you on the 10th of every month.
if all worms are like this you know the world might be pretty all right place
So, if all worms were like this, y'know the world be a pretty alright place.
thanks very much for watching take care
Thanks very much for watching. Take care.
[Music]
♫
Similar videos:

Trojan.Win32.VeryFun (Viewer-Made Malware 18)
danooct1
961.2K views 15.9K likes 463 dislikes 11 Jun 201782% match

P2P-Worm.Win32.Mantas
danooct1
98.4K views 2.6K likes 22 dislikes 25 Jun 201780% match

Virus.Win32.Winfig
danooct1
329.5K views 5.8K likes 145 dislikes 04 Jun 201780% match

Trojan.Win32.Alerta
danooct1
959K views 16.6K likes 509 dislikes 07 May 201772% match

Petya/NotPetya Ransomware Spreading via LAN
danooct1
136K views 3.1K likes 31 dislikes 29 Jun 201771% match

Trojan.Ransom.Petya (Petya 2.0 2016 Ransomware, flashing lights warning)
danooct1
451.9K views 8.8K likes 129 dislikes 27 Jun 201769% match

Email-Worm.Win32.Magold
danooct1
177.3K views 3.9K likes 39 dislikes 04 Feb 201765% match

Email-Worm.Win32.Maldal
danooct1
263K views 2.5K likes 21 dislikes 24 Jan 201364% match

Email-Worm.Win32.Gruel
danooct1
186.7K views 1.8K likes 17 dislikes 09 May 201364% match

Email-Worm.Win32.Sircam
Danct12
293 views 6 likes 0 dislikes 30 Sep 201960% match

Email-Worm.Win32.Lentin
danooct1
136.8K views 2.3K likes 19 dislikes 29 Sep 201560% match

Email-Worm.Win32.Parrot
danooct1
120.6K views 2.7K likes 21 dislikes 04 Nov 201660% match

Trojan.Ransom.Rensenware
danooct1
1.5M views 38K likes 657 dislikes 09 Apr 201758% match

IRC-Worm.Win32.Fagot
danooct1
556.8K views 8.1K likes 192 dislikes 21 Jan 201358% match

Net-Worm.Win32.Sasser On a Physical PC Network
danooct1
416.8K views 6.7K likes 113 dislikes 30 Apr 201458% match

Email-Worm.Win32.Magistr (Thanks for 100,000 subscribers!!!)
danooct1
377.5K views 10.4K likes 62 dislikes 17 May 201656% match

Email-Worm.Win32.Mydoom.A
danooct1
165.8K views 2.3K likes 21 dislikes 05 Feb 201654% match

Viewer-Made Malware 10 - Zika (Win32)
danooct1
759.7K views 14.2K likes 274 dislikes 09 Sep 201651% match

Viewer-Made Malware 7 - DeepUnder (Win32)
danooct1
565.5K views 8.4K likes 155 dislikes 17 Jun 201651% match

Viewer-Made Malware 3 - Mist (Win32)
danooct1
548.5K views 8.5K likes 218 dislikes 29 Jan 201651% match

Viewer-Made Malware 4 - Resonate (Win32)
danooct1
369.2K views 5.5K likes 59 dislikes 12 Feb 201651% match

Trojan.JS.YouAreAnIdiot
danooct1
5.1M views 103.3K likes 2.2K dislikes 19 Oct 201551% match



Virus.Win32.Rigel
danooct1
151.2K views 1.4K likes 22 dislikes 31 May 201350% match

Trojan.SymbOS.Fontal
danooct1
1.3M views 23.1K likes 971 dislikes 13 May 201649% match


Virus.Win16.Apparition
danooct1
287.1K views 3.6K likes 37 dislikes 07 Sep 201249% match

Virus.DOS.Michelangelo (25 years later)
danooct1
362.7K views 8.2K likes 86 dislikes 06 Mar 201747% match

Viewer-Made Malware 8 - MEMZ (Win32) (flashing lights warning)
danooct1
1.8M views 30.4K likes 550 dislikes 08 Jul 201646% match

VineMEMZ (Win32)
danooct1
336.4K views 7.9K likes 136 dislikes 23 Dec 201646% match

Virus.DOS.Hate
danooct1
156.6K views 1.6K likes 21 dislikes 22 Jan 201544% match

Virus.MSExcel.Neg
danooct1
185K views 3.5K likes 58 dislikes 02 Apr 201744% match


Settings Privacy About Contact Donate