Return to Jim World

Hawawi.F

		FAST TRACK: Removal Ratings Explained Glossary Application type: Malware Security Compromise: Yes. Advertising: No. Privacy Violation: Yes. Stability Problems: None Known. Overall Risk: Scum Rating: Security & Privacy Risk: Hawawi: Hawawi is a memory resident worm which propagates through email and filesharing and can slow down your computer, send system information and spread to other computers. How do you get it? Hawawi propagates by mass mailing copies of itself to addresses that it pulls from .HTM, .HTML, .EML and .TXT files. It also retrieves email addresses from the Microsoft Outlook Address book, MSN Messenger and Yahoo pages. It sends a message using the default SMTP server which can have all or some of the following in the subject line of the email: You gonna love it, Here is what u wanted, Check this out ;, Enjoy!, This is all i can send, Have Fun :), Wait for more :) , looool , Take a look , Never mind ! , See the attatched file , gift :) , Surprise! , save it for hard times , Happy Times :) , Useful, Very funny , Try it , you have to see this! , emazing! In addition to spreading though email, it also spreads through the KaZAA network, modifies the main startup page in Internet Explorer, sends system information to a particular email address and can disable the mouse and keyboard. Details: Hawawi is a memory resident worm, meaning that it will load whenver your computer starts, shares its memory and performs actions in any available windows. It can also detect email addresses, spread itself through email and send your system information to a specific email address. Users which use Microsoft Outlook Express, the KaZaa filesharing network, MSN or Yahoo pages are particularly vulnerable. Hawawi is known to have other aliases such as: W32.Galil.C@mm Hawawi.F: Stores its program in "\system32\a.ocx", "\system32\smtp.ocx" How does it Violate Privacy? To propagate itself, this worm uses a home users PC to mass email itself to others. As part of this process it can also send information about your system including passwords to a specific email address specified depending on the variant. Are there any known security issues? Hawawi is capable of silently installing itself, spreading to other PC's and sending your personal information along with it. Stability problems: None known at this time other than an occassionally slower PC.