1. /
  2. Security Response/
  3. W32.HLLW.Qaz.A

W32.HLLW.Qaz.A

Risk Level 2: Low

Discovered:
July 18, 2000
Updated:
February 13, 2007 11:53:12 AM
Also Known As:
Qaz.Trojan, Qaz.Worm, W32.HLLW.Qaz (gen), Worm.Qaz [Kaspersky], W32/QAZ.worm.gen [McAfee], W32/Qaz [Sophos], TROJ_QAZ.A [Trend], Win32.Qaz [Computer Associates
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Due to a decrease in submission rate, W32.HLLW.Qaz.A has been downgraded to a level 2 threat.

W32.HLLW.Qaz.A was first discovered in China in July 2000. It is a companion virus that can spread over a network. It also has a "backdoor" that will enable a remote user to connect to and control the computer using port 7597. Because this virus cannot spread to computers outside of the network, it may have originally been sent by email.

W32.HLLW.Qaz.A was originally known as Qaz.Trojan. It was renamed to W32.HLLW.Qaz.A on August 10, 2000. As of September 14, 2000, there are at least four variants of the original virus.




Configure Windows for maximum protection
Because this virus spreads by using shared folders on networked computers, to ensure that the virus does not re-infect the computer after it has been removed, Symantec suggests sharing with read-only access or using password protection. For instructions on how to do this, see your Windows documentation or the document How to configure shared Windows folders for maximum network protection.

Antivirus Protection Dates

  • Initial Rapid Release version July 18, 2000
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version July 18, 2000
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date July 18, 2000
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: High
  • Threat Containment: Moderate
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Medium
Writeup By: Motoaki Yamamura

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver