Hocgaly is an Internet worm that spreads by e-mail through messages with infected attachments. Once executed, the parasite installs itself to the system and runs a spreading routine. Hocgaly sends bogus e-mail messages to addresses it gathers from local web and programming files. Then it runs a payload. The worm disables the Sygate Firewall and attempts to perform Denial of Service (DoS) attacks against some Israeli web sites. Hocgaly runs on every Windows startup.