Skip navigation
Skip navigation
You are using an outdated browser. Please upgrade your browser.

The first malicious code utilising Desktop Themes files has been detected

Cambridge, UK 4th September, Kaspersky Lab, an international data-security software developer, announces the detection of the Internet worm "Lara": the first malicious program that spreads in Desktop Themes files. At the moment, Kaspersky Lab has received two reports of infections by this worm.

"Lara" spreads exclusively via Internet Relay Chat (IRC), transferring the "LaraCroft.theme" worm-carrying file to remote computers. The file name is presented to users in a deceitful way, masking itself as a Windows desktop decorating application according to the "Tomb Raider" theme. Upon starting the infected file, "Lara" scans the available disks, searching for the location IRC-related programs (mIRC client), and modifies their system files. As a result, the worm sends out its copies to all users connected to the same IRC-channel as the infected computer. The malicious program contains no other payload.

"We classify 'Lara' most likely as being a proof-of-concept malicious code. The ease with which it is detected and deleted, coupled with the relatively low popularity of the IRC-channels, means that there is not any possibility of a global epidemic happening," assessed Eugene Kaspersky, Head of Anti-Virus Research at Kaspersky Lab.

Defence procedures thwarting "Lara" have already been added to the daily Kaspersky Anti-Virus database updates.

For a more detailed description of this Internet worm, please visit the Kaspersky Virus Encyclopaedia,

About Kaspersky Lab

Kaspersky Lab Int. is a fast growing international privately owned data-security software-development company with offices in Moscow (Russia), Cambridge (UK) and Pleasanton (United States). Founded in 1997, the company concentrates its efforts on the development of world-leading anti-virus technologies and software. Kaspersky Lab also provides free online security related Internet information services. The company markets, distributes and supports its software and services in more than 40 countries worldwide.

Media Contacts

Denis Zenkin
Kaspersky Lab, Ltd.
Phone: +7 (095) 797 87 00

Sara Claridge
Marylebone Media Relations
Phone +44 118 975 5188

This press release was distributed by ResponseSource Press Release Wire on behalf of Marylebone Media Relations in the following categories: Consumer Technology, Personal Finance, Business & Finance, Computing & Telecoms, for more information visit