TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_AGOBOT.AAA
Overview

Malware type: Worm

In the wild: Yes

Destructive: No

Language: English

Platform: Windows NT, 2000, XP

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

High

Description: 

This worm takes advantage of the following Windows vulnerabilities:

  • IIS5/WEBDAV Buffer Overflow vulnerability
  • Remote Procedure Call (RPC) Distributed Component Object Model (DCOM) vulnerability
  • RPC Locator vulnerability

For more information about these Windows vulnerabilities, please refer to the following Microsoft Web pages:

It also attempts to log on to systems using a list of user names and passwords. It drops a copy of itself into accessible machines.

It terminates certain antivirus processes. It steals the CD keys of popular game applications.

This worm runs on Windows NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Oct. 13, 2004 12:57:11 AM GMT -0800
Description updated: Oct. 13, 2004 1:33:55 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.