W32.HLLW.Moega.E

W32.HLLW.Moega.E is a worm that has backdoor capabilities. It attempts to spread through the local area network. The worm connects to an IRC server to receive further instructions from its creator.

The icon of the W32.HLLW.Moega.E executable looks similar to that of the Windows XP Windows Update executable, Wupdated.exe. See the "Technical Details" section for an illustration.

Protection

• Initial Rapid Release version November 6, 2003
• Latest Rapid Release version July 19, 2008 revision 019
• Initial Daily Certified version November 6, 2003
• Latest Daily Certified version July 19, 2008 revision 018
• Initial Weekly Certified release date November 12, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low