W32.HLLW.Cult@mm

Name W32.HLLW.Cult@mm
Type
Affected Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Risk Level 1: Very Low
Discovered February 27, 2003
Update February 13, 2007 11:43:38 AM
Length
Info W32.HLLW.Cult@mm is a mass-mailing that has backdoor capabilities. It uses email to replicate, but sends only to the following domains: hotmail.com, msn.com, yahoo.com, Roadrunner.com, Earthlink.net, and email.com.

The email message has the following characteristics:

Subject:
Hi, I sent you an eCard from BlueMountain.com

Attachment:
BlueMountaineCard.pif

W32.HLLW.Cult@mm also attempts to spread using the KaZaA file-sharing network. W32.HLLW.Cult@mm is packed with XTPack.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 – 49
  • Number of Sites: 0 – 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High
Writeup By: Serghei Sevcenco
Details >W32.HLLW.Cult@mm
convert this post to pdf. Tags: ,

Related Virus

"Free Scan W32.HLLW.Cult@mm

Print This Virus article Print This Virus article


Leave a Comment

You must be logged in to post a comment.