Symantec.com > Enterprise > Security Response > W32.HLLW.Magold@mm

W32.HLLW.Magold@mm

Risk Level 2: Low

Discovered:
May 29, 2003
Updated:
February 13, 2007 12:01:44 PM
Also Known As:
W32/Auric@MM [McAfee], W32/Magold-A [Sophos], WORM_MAGOLD.A [Trend], Win32.Auric.A [CA], I-Worm.Magold [KAV]
Type:
Worm
Systems Affected:
Windows 2000, Windows NT, Windows XP

W32.HLLW.Magold@mm is a mass-mailing worm that sends itself to the contacts it finds in the Windows Address Book, as well as in all the files with the .html, .htm, and .hta file extensions. When W32.HLLW.Magold@mm is executed, it will display a fake message box with the title, "DirectX."

The email message has the file attachment, Maya Gold.scr. It also spoofs the From address to be "erotika@lap.hu."

The worm also spreads through many different peer-to-peer file-sharing programs and through mIRC.

Antivirus Protection Dates

  • Initial Rapid Release version May 30, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version May 30, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date June 4, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Douglas Knowles

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver