W32.HLLW.Icasur is a worm that copies itself to the shared folders of the KaZaA file-sharing program. Several variants have been found. All variants are written in the Microsoft Visual Basic programming language and may be compressed with UPX. The worm disguises itself as movies, games, porno-related programs, or as software files to trick KaZaA users into downloading the program and opening it. Some of the possible file names are:
- EuRoSuCks ScreenSaver.scr
- Norton AntiVirus-FullInstall.exe
- KAV40UPDT ScreenSaver.scr
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.