W32.HLLW.Studd

W32.HLLW.Studd is a worm that attempts to spread through the KaZaA, IRC, network shares, as well as the mapped network drives. An attacker can remotely control the infected hosts through IRC.

The worm is written in the Delphi programming language.

Protection

• Initial Rapid Release version December 1, 2003
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version December 1, 2003
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date December 3, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Medium