- March 14, 2003
- February 13, 2007 11:44:20 AM
Also Known As:
- W32.HLLW.Oror.AD@mm, W32/Roro.AD@mm [F-Prot], I-Worm.Roron.gen [KAV]
W32.HLLW.Oror.AI@mm is a variant of the W32.HLLW.Oror@mm mass-mailing worm. This worm attempts to spread using email, mIRC, KaZaA, network shares, and mapped drives. The email attachment arrives with a .exe or .scr file extension. W32.HLLW.Oror.AI@mm also attempts to terminate and remove various security products from the infected computer.
This threat is written in the C++ language. Some of the files are compressed with UPX.
Antivirus Protection Dates
Initial Rapid Release version March 14, 2003
Latest Rapid Release version August 20, 2008 revision 017
Initial Daily Certified version March 14, 2003
Latest Daily Certified version August 20, 2008 revision 016
Initial Weekly Certified release date March 19, 2003
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Jari Kytojoki