W32.HLLW.Heffer

Discovered:
November 20, 2002
Updated:
February 13, 2007 11:49:36 AM
Also Known As:
W97M.Heffer
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.HLLW.Heffer may use Microsoft Outlook to mass-mail itself to all contacts in the Outlook Address Book. It may also spread itself through the mIRC or KaZaA file-sharing network. The email has the following characteristics,

Subject: Re: <recipient  email address>
Message: Check this stuff.
Attachment: setup.exe

Several variants of W32.HLLW.Heffer have been found. All variants infect Microsoft Word documents. The infected Word documents are detected as W97M.Heffer.

This threat is written in the Microsoft Visual Basic programming language.

Antivirus Protection Dates

  • Initial Rapid Release version November 20, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version November 20, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date November 21, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver