W32.HLLW.Infex@mm

W32.HLLW.Infex@mm is a mass-mailing worm that uses Microsoft Outlook or the current MAPI program to send itself to all the contacts in the Outlook Address Book. It randomly chooses the subject line. The attachment name is Setup.rar.

The worm attempts to spread itself through some file-sharing networks, such as:

• Bearshare
• eDonkey2000
• Ftopia3
• Gnucleus
• Grokster
• KaZaA
• KaZaA Lite
• KMD
• Limewire
• Morpheus
• Ovornet
• Rapigator
• Shareaza
• Tesla
• Toadnode
• WinMX
• XoloX.

It also attempts to spread itself through ICQ.

This threat is written in the Microsoft Visual Basic programming language and is compressed with UPX.