- Discovered:
- November 20, 2002
- Updated:
- February 13, 2007 11:49:36 AM
- Also Known As:
- W97M.Heffer
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Heffer may use Microsoft Outlook to mass-mail itself to all contacts in the Outlook Address Book. It may also spread itself through the mIRC or KaZaA file-sharing network. The email has the following characteristics,
Subject: Re: <recipient email address>
Message: Check this stuff.
Attachment: setup.exe
Several variants of W32.HLLW.Heffer have been found. All variants infect Microsoft Word documents. The infected Word documents are detected as W97M.Heffer.
This threat is written in the Microsoft Visual Basic programming language.
Antivirus Protection Dates
- Initial Rapid Release version November 20, 2002
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version November 20, 2002
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date November 21, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu



