- Discovered:
- February 17, 2003
- Updated:
- February 13, 2007 11:43:10 AM
- Also Known As:
- W32/Gant@MM [McAfee], I-Worm.Tanger [KAV]
- Type:
- Worm, Virus
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Tang@mm is a mass mailing worm that attempts to disguise itself as a file, which Windows does not recognize. The worm uses the icon of an unregistered file type to perform this.
W32.HLLW.Tang@mm emails itself to all the contacts in the Windows Address Book. It also attempts to spread itself through the file-sharing networks, IRC, Microsoft Word Documents, Microsoft Excel Spreadsheets and across mapped drives.
The worm is written in Microsoft Visual Basic (VB) and is compressed with UPX. The VB run-time libraries must be installed for the worm to be executed.
Antivirus Protection Dates
- Initial Rapid Release version February 18, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version February 18, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date February 19, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Medium
Distribution
- Distribution Level: High
Writeup By: Robert X Wang







