Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

W32.HLLW.Deadhat.B

Feb 14, 2004 4:14AM PST

Discovered on: February 12, 2004
Last Updated on: February 14, 2004 03:47:43 PM

W32.HLLW.Deadhat.B:


Is a variant of the W32.HLLW.Deadhat worm.
Has backdoor capabilities.
Attempts to uninstall the W32.Mydoom.A@mm and W32.Mydoom.B@mm worms, and then spread to other systems infected with W32.Mydoom@mm variants.
Spreads through the Soulseek file-sharing program.


Also Known As: W32/Deadhat.B.worm [Panda]
Variants: W32.HLLW.Deadhat
Type: Worm

When W32.HLLW.Deadhat.B is executed, it performs the following actions:


May display a message box containing the following text:

Corrupted File
Error executing program!


Copies itself as %System%\msgsrv32.exe.

Read more: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deadhat.b.html

Discussion is locked