W32.HLLW.Lovgate.G@mm

W32.HLLW.Lovgate.G@mm is a minor variant of W32.HLLW.Lovgate.C@mm. This worm contains mass-mailing and backdoor functionalities. This variant does not properly function under Windows 95/98/Me systems.

To spread itself, the worm attempts to reply to incoming email messages and to email addresses that it finds in HTML files. The subject and attachment of the incoming email are chosen from a predefined list. The attachment will have a .exe, .pif, or .scr file extension.

W32.HLLW.Lovgate.G@mm also attempts to copy itself to all the computers on a local network, and then attempts to infect these computers. The worm also has a backdoor Trojan capability.

NOTE: Virus definitions dated March 24, 2003 may detect this threat as W32.HLLW.Lovgate.C@mm.

Symantec Security Response has created a tool to remove W32.HLLW.Lovgate.G@mm. Click here to obtain the tool.