-- W32.Lecna.A is a worm that spreads by exploiting the Microsoft Windows Local Security Authority Service Remote Buffer Overflow (as described in Microsoft Security Bulletin MS04-011 (http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx)). The worm opens a back door, downloads remote files, and uses a rootkit to hide its presence on the compromised computer.
For more information read: http://securityresponse.symantec.com/avcenter/venc/data/w32.lecna.a.html (http://securityresponse.symantec.com/avcenter/venc/data/w32.lecna.a.html)