W32.HLLW.Magold@mm is a mass-mailing worm that will send itself to recipients it finds in the Windows Address Book and in all files with .html, .htm, and .hta file extensions. The e-mail message will have a file attachment of Maya Gold.scr. It will also spoof the from address to be an address in Hungary.
The worm will also spread through many different peer-to-peer file-sharing programs as well as through mIRC.
Symantec Security Response will continue to analyze this threat and will provide additional information accordingly.
Also Known As: W32/Auric@MM [McAfee]
Infection Length: 240,640 bytes(packed), 622,592 bytes(unpacked)
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux