- August 6, 2002
- February 13, 2007 11:55:09 AM
W32.HLLW.Neight is a mass-mailing worm. It uses Microsoft Outlook to send itself to all contacts in Outlook Address Book. The email message can have various subject lines; the attachment is PhotoAlbum.exe.
The worm creates a Visual Basic (VB) script file and inserts this file into Microsoft Word documents. This VB script file is also a mass-mailing worm that emails itself to the first 50 contacts in the Outlook Address Book. This email message has the subject "Important E-Mail from <current user>," and the Melissa.vbs file is attached.
The worm attempts to spread by copying itself to the KaZaA shared folder and ICQ shared folder.
Antivirus Protection Dates
Initial Rapid Release version August 7, 2002
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version August 7, 2002
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date August 7, 2002
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu