- Discovered:
- April 11, 2003
- Updated:
- February 13, 2007 11:45:36 AM
- Also Known As:
- W32/Morb@MM [McAfee]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Morb@mm is a MAPI worm that replies to all the messages in your Email Inbox folder and drops the Backdoor.Sdbot Trojan into the infected system. This worm also attempts to spread itself through the KaZaA file-sharing network.
The email has the following characteristics:
Subjects/Message: The subject line and message body are randomly chosen from a list that the worm carries.
Attachment: Attachment is one of the following:
- Q349247.exe
- information.DOC.exe
- Saddam_Game.exe
- I_Love_U.exe
- NakedPics.JPG.exe
- FreeSex.exe
- B-ville.exe
- StockInformation.XLS.exe
- SecretFile.exe
- Attachement.exe
This threat is written in the Bollard Delphi programming language.
Antivirus Protection Dates
- Initial Rapid Release version April 14, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version April 14, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date April 16, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Yana Liu







