1. Symantec/
  2. Security Response/
  3. W32.HLLW.Backzat


Risk Level 1: Very Low

December 26, 2002
February 13, 2007 11:41:45 AM
Also Known As:
W32.Backzat.Worm, I-Worm.Batzback.a [KAV], I-Worm.Batzback.b [KAV], Worm.Batzback.A [McAfee], W32/Backzat-A [Sophos], Win32.Backzat.A [CA]
Systems Affected:

W32.HLLW.Backzat is a worm that uses IRC to distribute itself. This worm attempts to delete security software from your computer. Also, it is written in Microsoft Visual C++ and is packed with UPX.

NOTE: Virus definitions dated prior to April 25, 2003 may detect this threat as W32.Backzat.Worm.

Antivirus Protection Dates

  • Initial Rapid Release version December 26, 2002
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version December 26, 2002
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date December 30, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Kaoru Hayashi

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube