Discovered: July 28, 2002
Updated: February 13, 2007 11:49:13 AM
Also Known As: Worm.P2P.Sytro [AVP], W32/Qtint.worm[McAfee], Win32/Sytro.Worm[CA]
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.HLLW.Electron is a worm that spreads across KaZaA or Morpheus file-sharing, peer-to-peer networks. The worm disguises itself as a movie, a game, or a software file to trick KaZaA and Morpheus users into downloading the program and opening it.
Several variants are detected as W32.HLLW.Electron. All variants are written in the Borland Delphi programming language. Some of the variants are compressed with UPX.
Protection
-
Initial Rapid Release version July 29, 2002
-
Latest Rapid Release version August 20, 2008 revision 017
-
Initial Daily Certified version July 29, 2002
-
Latest Daily Certified version August 20, 2008 revision 016
-
Initial Weekly Certified release date July 31, 2002
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu