- July 10, 2003
- February 13, 2007 12:03:42 PM
Also Known As:
- W32/Gant.gen@MM [McAfee]
W32.HLLW.Redist.C@mm is a mass-mailing worm that uses Microsoft Outlook to send itself to all the contacts in the Outlook Address Book. The worm also attempts to spread itself through KaZaA, KaZaA Lite, KMD, LimeWire, Gnucleus, Shareaza, BearShare, Edonkey, Edonkey2000, Morpheus, Grokster, WinMX, Tesla, Overnet, XoloX, Rapigator file-sharing networks, and ICQ.
When W32.HLLW.Redist.C@mm runs, it displays a fake message, titled "Error Starting Program."
The email has the following characteristics:
Subject: Funny picture
Subject: The passwords
Subject: The file
Attachment: Database<a random number>.pif
Subject: That file
Attachment: Soccer<a random number>.pif
Subject: Fire Screensaver
Subject: Stupid picture
Subject: Web design
This threat is written in the Microsoft Visual Basic programming language and is compressed with UPX.
Antivirus Protection Dates
Initial Rapid Release version July 11, 2003
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version July 11, 2003
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date July 16, 2003
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu