Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- March 14, 2003
- Updated:
- February 13, 2007 11:44:20 AM
- Also Known As:
- W32.HLLW.Oror.AD@mm, W32/Roro.AD@mm [F-Prot], I-Worm.Roron.gen [KAV]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Oror.AI@mm is a variant of the W32.HLLW.Oror@mm mass-mailing worm. This worm attempts to spread using email, mIRC, KaZaA, network shares, and mapped drives. The email attachment arrives with a .exe or .scr file extension. W32.HLLW.Oror.AI@mm also attempts to terminate and remove various security products from the infected computer.
This threat is written in the C++ language. Some of the files are compressed with UPX.
Antivirus Protection Dates
- Initial Rapid Release version March 14, 2003
- Latest Rapid Release version August 20, 2008 revision 017
- Initial Daily Certified version March 14, 2003
- Latest Daily Certified version August 20, 2008 revision 016
- Initial Weekly Certified release date March 19, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: High
Distribution
- Distribution Level: High
Writeup By: Jari Kytojoki
