W32.HLLW.Cult - LoveCard.pif (M)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.HLLW.Cult

Sender:

NA

Subject:

Hello , I sent you a beautiful Love Card ^_* (M)
Hi, I sent you an eCard from BlueMountain.com (gen,C)

Message:

Hi , I sent you an eCard from Blue-Mountain.com To view your eCard,
open the attachmentIf you have any comments or questions, please visit
http:/ /www.bluemountain.com/customer/index.pdThanks for using
BlueMountain.com. (C)
To see your Card, Please open the attachmentIf you want to send a
reply, please visithttp://www.Love-card.com/Love/index.htmlThank
You... (M)

Attachment:

BlueMountaineCard.pif (gen, C)
LoveCard.pif (M)

Comments: A mass-mailing worm that has backdoor capabilities. It uses email to replicate, but sendsonly to the following domains: hotmail.com, msn.com, yahoo.com, Roadrunner.com,Earthlink.net, and email.com.

Symptoms:


 Displays the following message: 
 Application Error 
 The instruction at "0x776456de" referenced memory at "0x623525dg3".
The memory could not be "read" 
 Click on OK to terminate the application

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions.
Run a full system scan and delete all the files detected as W32.HLLW.Cult.B@mm.Manually delete the file, %System%\Awqewqed.dll.
Reverse the changes that the worm made to the registry.