Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- December 4, 2002
- Updated:
- February 13, 2007 11:55:02 AM
- Also Known As:
- I-Worm.Burnox [AVP]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Burnox@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all contacts in the Microsoft Outlook Address Book. It can also spread through the KaZaA file-sharing network. The email message has the following characteristics:
Subject: Important: Microsoft Windows Patch For Xp,2k,ME,98,95.
Message:
Microsoft just release this patch for all versions of Microsoft Windows.This update patches many of the recent vulnerabilities!
It is recommended that you patch your operating system now. Though it is not required. *Please Note* This is not the actual Microsoft patch. The attached program is Microsoft Update
Attachments: MicrosoftUpdate.com
The worm downloads the Backdoor.Slackbot.B Trojan from a predefined Web site and executes it.
This threat is written in the Microsoft Visual Basic programming language and is compressed with UPX. The decompressed size is about 20 KB.
Antivirus Protection Dates
- Initial Rapid Release version December 4, 2002
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version December 4, 2002
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date December 6, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu
