W32.HLLW.Redist@mm is a mass-mailing worm that attempts to email itself to all the contacts in the Windows Address Book. The email will have a subject line and attachment chosen from a predetermined list. The attachment will have a .exe, .pif, or .scr file extension. The worm also attempts to spread itself through the KaZaA file-sharing network.
W32.HLLW.Redist@mm attempts to steal information from an infected computer and send it to a specified email address. The worm will attempt to terminate the processes of various programs, including antivirus and firewall programs.
This threat is written in the Microsoft Visual Basic (VB) programming language and is compressed with UPX. The VB run-time libraries are required to execute W32.HLLW.Redist@mm.
Also Known As: W32/Gant.b@mm [McAfee]
Infection Length: 17,920 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Windows 3.x, Macintosh, OS/2, UNIX, Linux