W32.HLLW.Moega.D

W32.HLLW.Moega.D is a worm with backdoor capabilities that attempts to spread through the local area network. The worm attempts to open ports 139 and 445, and to steal sensitive information.

The executable for W32.HLLW.Moega.D looks similar to the icon for Windows XP's Windows Update executable, Wupdmgr.exe. See the "Technical Details" section for an illustration.

This worm is packed with FSG.

Protection

• Initial Rapid Release version October 9, 2003
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version October 9, 2003
• Latest Daily Certified version July 19, 2008 revision 018
• Initial Weekly Certified release date October 15, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low