Malware type: Worm

Aliases: Backdoor.Win32.SdBot.gen (Kaspersky), W32/Sdbot.worm.gen (McAfee), W32.Randex.gen (Symantec), Worm/SdBot.57334.A (Avira), W32/Sdbot-Fam (Sophos), Backdoor:Win32/Sdbot (Microsoft)

In the wild: No

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This malware attempts to connect to an IRC (Internet Relay Chat) server, where it joins a specified channel. While in IRC, it is able to receive commands from remote users, leaving the system compromised.

It modifies the registry to enable its automatic execution at every system startup.

It runs on Windows 95, 98, ME, NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Mar. 18, 2004 3:54:51 PM GMT -0800
Description updated: Mar. 18, 2004 3:54:59 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.