Welcome to the Computer Security Wiki! You can help us by expanding stubs, create new articles and improve current articles.
You can also help us by logging-in or creating an account!


From Malware Wiki
Jump to: navigation, search

Stubsymbol.png This article is a stub. You can help by editing it.

OriginMechelen, Belgium
Programming LanguageLogo
PlatformMicrosoft Windows
File Type.LGP
This box: view  talk  edit

Email-Worm.VBS.Logic or Logic is an email worm that spreads as a .LGP (logo project) file. This is a very uncommon file extension for worms.


Logic is the first known Internet-worm written in the Logo language. The worm itself is an LGP file, and it can only be executed with special interpreter software like SuperLogo for Windows.

The worm doesn't spread by itself; rather it drops two different components:

  • a VBS file to spread through e-mail, similar to how LoveLetter behaves
  • an INI file to spread through IRC channels

It also drops a BAT file that writes a message on the screen during Windows startup:

You think Logo worms don't exist? Think again!

The worm creates a VBS file in a Windows startup folder. Thus, it will be executed automatically upon the next Windows startup. The scripts in the VBS file create and send a message via Outlook to every entry in the address book.

[Subject] Hey friends!
[Body] Hello! Look at my new SuperLogo program! Isn't it cool?
[Attachment] logic.lgp

An MIRC script in the worm's INI file is very short, and just sends the worm's LGP file to all users joining an infected channel.