Email-Worm.VBS.Logic or Logic is an email worm that spreads as a .LGP (logo project) file. This is a very uncommon file extension for worms.
Logic is the first known Internet-worm written in the Logo language. The worm itself is an LGP file, and it can only be executed with special interpreter software like SuperLogo for Windows.
The worm doesn't spread by itself; rather it drops two different components:
- a VBS file to spread through e-mail, similar to how LoveLetter behaves
- an INI file to spread through IRC channels
It also drops a BAT file that writes a message on the screen during Windows startup:
You think Logo worms don't exist? Think again!
The worm creates a VBS file in a Windows startup folder. Thus, it will be executed automatically upon the next Windows startup. The scripts in the VBS file create and send a message via Outlook to every entry in the address book.
[Subject] Hey friends! [Body] Hello! Look at my new SuperLogo program! Isn't it cool? [Attachment] logic.lgp
An MIRC script in the worm's INI file is very short, and just sends the worm's LGP file to all users joining an infected channel.