Discussion in 'malware problems & news' started by bigc73542, Dec 17, 2003.
FYI...now rated a "Category 2" by Symantec:
- Ed. note: (Apologies, cannot post correct URL link due to board limitations - use "copy/paste").
- aka: W32.Holar.C@mm, W32/Holar.c@MM [McAfee], W32/Lagel.A [Panda], Win32.Holar.C [CA], WORM_HOLAR.C [Trend], I-Worm.Galil [KAV]
"...W32.Galil@mm is a mass-mailing worm. After sleeping about 15 minutes, it may overwrite all files in all folders on all writeable drives with 215 bytes of text. It deletes all files on drives D, E, F, and G. It is written in the Microsoft Visual Basic (VB) programming language and compressed with UPX. The size is 80,626 bytes after it is unpacked. The worm uses its own SMTP engine or Microsoft Outlook to send itself to all addresses that it finds in files on the infected computer. Multiple copies of the worm can be attached to the outgoing email message..."
Separate names with a comma.