HeadsUp** W32.HLLW.Cidas@mm

Hi Guys,

If you find the symantec information not to your liking or you have a prefered AV.. sometimes Symantec will list the names given by the other major AV companies in the bulliten..

So here is another of todays information found on this Symantec Page

And here is the spiel on this one..

cheers

Quote:

---

W32.HLLW.Cidas@mm is a mass-mailing worm that attempts to spread itself through email, mIRC, and file-sharing networks.

The email messages will have the following characteristics:
Subject: (One of the following)

New update!
Interesting file
Update your system
A windows patch
Very important!
Try this patch that i've found yesterday, it's very useful!
This Windows update is very simple and powerful! It helped me a lot!
Check out this program, it has a lot of functions!

Attachment: (One of the following)
WinUpdate.exe
WindowsPatch.exe
Updater.exe
WinTool.exe
BugFixer.exe
Upgrade_Installer.exe
Microsoft_patch_7209.exe

W32.HLLW.Cidas@mm is written in the Visual Basic and is compressed with UPX.


Also Known As: I-Worm.Centar.h [KAV], W32/Fourseman.g@MM [McAfee]
Type: Worm
Infection Length: 27,648 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux

---