W32.HLLP.Scrambler

This Windows virus infects EXE files on local machines. It also exhibits worm-like behavior by sending itself through email using Microsoft Outlook and through Internet Relay Chat via mIRC. The file "Scrambler.VBS" is dropped by the virus, and if mIRC is installed, the file "Script.INI" will be dropped in the mIRC program folder.

Protection

• Initial Rapid Release version May 30, 2000
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version May 30, 2000
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High