TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
TROJ_SADHOUND.A
Overview

Malware type: Trojan

Aliases: Trojan-Dropper.Win32.Small.aa (Kaspersky), MultiDropper-CE (McAfee), Backdoor.Sadhound (Symantec), DR/Small.AA (Avira), Troj/SadHound-A (Sophos),

In the wild: No

Destructive: No

Language: English

Platform: Windows 95 / 98 / NT / 2000/ ME / XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Low

Distribution potential:

Low

Description: 

This Trojan drops an Internet Relay Chat (IRC) Bot, which Trend Micro antivirus detects as BKDR_IRCSDBOT.O.

BKDR_IRCSDBOT.O connects to a specific IRC channel where it enables remote users to launch Denial of Service (DoS) attacks on other systems. Remote users also use this malware to execute any of the following on the affected system:

  • View information
  • Upload and execute a file from a remote location.

This malware also drops a text file that contains this message:

There's no special reason for sending this to you, except that... I was feeling a little lonely, and when I asked myself what I seemed to be missing the most, the answer turned out to be ...you. I Miss You

It opens the dropped file using a default text file viewer on the affected system.

This malware runs on Windows 95, 98, ME, NT, 2000, and XP systems.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jan. 25, 2003 4:50:04 PM GMT -0800
Description updated: Jan. 25, 2003 4:50:14 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.