x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Wallon.A

Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Wallon.A
Technical name:W32/Wallon.A.worm
Threat level:Medium
Alias:W32.Wallon.A@mm, W32/Wallon.worm.a, I-Worm.Wallon, W32/Wallon.worm, WORM_WALLON.A
Type:Worm
Effects:  

It gathers e-mail addresses in the affected computer and sends them out to its author. It changes the browser Internet Explorer home page.

Affected platforms:

Windows XP/2000/NT

Detection updated on:May 12, 2004
StatisticsNo

Brief Description 

    

Wallon.A is a worm that spreads via e-mail in a message that contains a link to an specific web site.

When the user clicks on the link, Wallon.A is downloaded to the computer, by means of a process that exploits the vulnerability Exploit/MIE.CHM.

In addition, Wallon.A gathers e-mail addresses from Windows Address Book of the affected computer and sends them out to a determined address.

Wallon.A changes the browser Internet Explorer home page.

Visible Symptoms 

    

Wallon.A is very easy to recognize, as it changes the browser Internet Explorer home page to http://www.google.com.super-fast-search.apsua.com/search.htm.

In addition, if the Windows Address Book is empty, Wallon.A displays the following error message on screen: