- Discovered:
- May 29, 2003
- Updated:
- February 13, 2007 12:01:44 PM
- Also Known As:
- W32/Auric@MM [McAfee], W32/Magold-A [Sophos], WORM_MAGOLD.A [Trend], Win32.Auric.A [CA], I-Worm.Magold [KAV]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows NT, Windows XP
W32.HLLW.Magold@mm is a mass-mailing worm that sends itself to the contacts it finds in the Windows Address Book, as well as in all the files with the .html, .htm, and .hta file extensions. When W32.HLLW.Magold@mm is executed, it will display a fake message box with the title, "DirectX."
The email message has the file attachment, Maya Gold.scr. It also spoofs the From address to be "erotika@lap.hu."
The worm also spreads through many different peer-to-peer file-sharing programs and through mIRC.
Antivirus Protection Dates
- Initial Rapid Release version May 30, 2003
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version May 30, 2003
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date June 4, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Moderate
Damage
- Damage Level: Medium
Distribution
- Distribution Level: High
Writeup By: Douglas Knowles



