1. Symantec/
  2. Security Response/
  3. W32.Hardoc@mm


Risk Level 1: Very Low

July 10, 2004
February 13, 2007 12:18:01 PM
Systems Affected:

W32.Hardoc@mm is a mass-mailing worm that sends itself to email addresses found in .html files and the Windows address book on the infected computer. This worm uses the Incorrect MIME Header vulnerability (described in Microsoft Security Bulletin MS01-020) to allow the automatic execution of the attachment on an unpatched computer.

The email has the following characteristics:

Subject: (One of the following)
  • Re:
  • Fw:
  • Power Point
Body: !!! Power Point !!!
Attachment: PowerPoint.scr

Antivirus Protection Dates

  • Initial Rapid Release version July 11, 2004
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version July 11, 2004
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date July 14, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Heather Shannon

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube