W32.HLLW.Parved

W32.HLLW.Parved is a network-aware worm that attempts to replicate across the open network shares. The worm copies itself to the remote computer using many different names carried by the worm. It also uses an icon typically associated with a Shockwave Flash file.

This threat is written in the Borland C++ programming language.

NOTE: Definitions dated prior to January 8, 2003 may detect this threat as a Trojan Horse.

Protection

• Initial Rapid Release version January 8, 2003
• Latest Rapid Release version January 8, 2003
• Initial Daily Certified version January 8, 2003
• Latest Daily Certified version January 8, 2003
• Initial Weekly Certified release date January 8, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Medium