W32.HLLW.Cult.M@mm

Risk Level 1: Very Low

Printer Friendly Page

Discovered: February 15, 2004
Updated: February 13, 2007 12:17:28 PM
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


W32.HLLW.Cult.M@mm is a mass-mailing worm that uses its own SMTP engine to send itself to randomly generated email addresses. The worm also has IRC Trojan functionality that allows the Trojan's creator to control the infected computer by using Internet Relay Chat (IRC).

The email message has the following characteristics:

Subject: Hello , I sent you a beautiful Love Card ^_*
Attachment: LoveCard.pif

This threat is compressed with ASPack.

Protection

  • Initial Rapid Release version February 16, 2004
  • Latest Rapid Release version July 19, 2008 revision 019
  • Initial Daily Certified version February 16, 2004
  • Latest Daily Certified version January 20, 2009 revision 048
  • Initial Weekly Certified release date February 16, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low

Writeup By: Robert X Wang
Search by name
Example: W32.Beagle.AG@mm
Learn more about Zero-Day / Operation Aurora / Hydraq
Symantec DeepSight Screensaver