Backdoor.Sdbot

Risk Level 2: Low

Printer Friendly Page

Discovered: April 30, 2002

Updated: February 13, 2007 11:39:02 AM

Also Known As: IRC-Sdbot [McAfee], Backdoor.IRC.SdBot [Kaspersky], BKDR_SDBOT.B [Trend], Troj/Sdbot-B [Sophos], Win32.SdBot.14176 [CA]

Type: Trojan Horse

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Backdoor.Sdbot is a Trojan horse that opens a back door and allows a remote attacker to control a computer by using Internet Relay Chat (IRC). The Trojan can update itself by checking for newer versions on the Internet.

Protection

Initial Rapid Release version May 1, 2002
Latest Rapid Release version November 9, 2009 revision 056
Initial Daily Certified version May 1, 2002 revision 003
Latest Daily Certified version November 9, 2009 revision 039
Initial Weekly Certified release date May 1, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Medium
Number of Infections: More than 1000
Number of Sites: More than 10
Geographical Distribution: Medium
Threat Containment: Easy
Removal: Moderate

Damage

Damage Level: Medium

Distribution

Distribution Level: Low

Writeup By: Serghei Sevcenco

Technical Details

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}