- December 16, 2002
- February 13, 2007 11:41:35 AM
Also Known As:
- W32/Lioten.worm [McAfee], Win32.Lioten [CA], WORM_LIOTEN.A [Trend], W32/Lioten-A [Sophos], Worm.Win32.Lioten [KAV]
W32.HLLW.Lioten is a simple worm that attempts to copy itself over Windows NT-based networks. The worm is written in the Visual C programming language and is packed with UPX.
When attempting to find machines to infect, it will query machines on port 445.
By default, installations of Windows NT 4 do not listen on port 445, whereas Windows 2000 and Windows XP installations do listen on port 445.
Antivirus Protection Dates
Initial Rapid Release version December 17, 2002
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version December 17, 2002
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date December 18, 2002
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Jari Kytojoki