Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically


Aliases: Win32/Hai.worm, W32.HLLW.Hai, Win32.HLLW.Hai.53248

Win32/Hai.A is a worm written in Visual C++.  The worm is compressed and encrypted by means of the utility PELOCK.  Its size is 69635 bytes but after unpacking it increases to 86016 bytes.  The worm spreads by means of the local computer network.  The worm spreads to shared network disks on which the directory Windows exists.  This directory must be accessible to everyone.  The worm copies itself into a directory like that under a random name.  It ensures its activation after a system restart by modifying the file section [run] of the file win.ini.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this encyclopedia may be reproduced, transmitted or used in any other way in any other form or by any means without prior permission from Eset.