Malware type: Worm

Aliases: W32/Holar-G (Sophos),

In the wild: No

Destructive: Yes

Language: English

Platform: Windows

Encrypted: No

Description: 

This mass-mailing worm uses Microsoft Outlook to send out copies of itself as an attachment in email to all the entries listed in the Microsoft Outlook address book. This email contains no message and has a variable subject, which is also the filename of the attached malware copy. The email attachment uses the file extension, PIF.

This destructive worm overwrites files with the following extensions:

• mdb
• xls
• doc
• swf
• ppt
• jpg
• pps
• mpeg
• zip
• txt
• mpg
• avi
• rm
• mde
• dbx
• php
• pdf
• rar

This worm infects HTM and HTML files in all the directories and subdirectories of the current drive. Infected files, which Trend Micro detects as HTML_HOLAR.A, can be cleaned and restored to their original state.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jul. 26, 2002 4:21:53 PM GMT -0800
Description updated: Jul. 27, 2002 7:07:47 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.