1. Symantec/
  2. Security Response/
  3. W32.HLLW.Morb@mm


Risk Level 1: Very Low

April 11, 2003
February 13, 2007 11:45:36 AM
Also Known As:
W32/Morb@MM [McAfee]
Systems Affected:

W32.HLLW.Morb@mm is a MAPI worm that replies to all the messages in your Email Inbox folder and drops the Backdoor.Sdbot Trojan into the infected system. This worm also attempts to spread itself through the KaZaA file-sharing network.

The email has the following characteristics:

Subjects/Message: The subject line and message body are randomly chosen from a list that the worm carries.
Attachment: Attachment is one of the following:
  • Q349247.exe
  • information.DOC.exe
  • Saddam_Game.exe
  • I_Love_U.exe
  • NakedPics.JPG.exe
  • FreeSex.exe
  • B-ville.exe
  • StockInformation.XLS.exe
  • SecretFile.exe
  • Attachement.exe

This threat is written in the Bollard Delphi programming language.

Antivirus Protection Dates

  • Initial Rapid Release version April 14, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version April 14, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date April 16, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube