W32.HLLW.Winevar is a mass-mailing worm that disables some Antivirus and Firewall programs and drops and executes the W32.FunLove.4099 virus. It was put in category 2 by Symantec today.
W32.HLLW.Winevar is distributed by email and might have these 3 files within : [some characters] means anything can be contained within :
WIN[some characters].TXT (12.6 KB) MUSIC_1.HTM
WIN[some characters].GIF (120 bytes) MUSIC_2.CEO
WIN[some characters].PIF
for more info on this worm go
here