W32.HLLW.Cidas@mm is a mass-mailing worm that attempts to spread itself through email, mIRC, and file-sharing networks.
The email messages will have the following characteristics:
Subject: (One of the following)
New update!
Interesting file
Update your system
A windows patch
Very important!
Try this patch that i've found yesterday, it's very useful!
This Windows update is very simple and powerful! It helped me a lot!
Check out this program, it has a lot of functions!
Attachment: (One of the following)
WinUpdate.exe
WindowsPatch.exe
Updater.exe
WinTool.exe
BugFixer.exe
Upgrade_Installer.exe
Microsoft_patch_7209.exe
W32.HLLW.Cidas@mm is written in the Visual Basic and is compressed with UPX.
Also Known As: I-Worm.Centar.h [KAV], W32/Fourseman.g@MM [McAfee]
Type: Worm
Infection Length: 27,648 bytes
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux