TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_SDBOT.AVD
Overview

Malware type: Worm

Aliases: W32/Sdbot.worm.gen.as (McAfee), W32.Spybot.Worm (Symantec), TR/Crypt.XPACK.Gen (Avira), W32/Rbot-Gen (Sophos),

In the wild: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

High

Description: 

This worm spreads via network shares. It copies itself to the default shared folders of accessible machines. It also uses a predefined list of user names and passwords to gain entry to remote systems.

It also has backdoor capabilities. Using a random TCP port, may execute remote commands on the host machine. This worm performs a denial of service (DoS) attack by performing the several flood methods against target IP addresses.

For additional information about this threat, see:
Solution
Technical Details

Description created: Mar. 10, 2005 9:09:52 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.