1. /
  2. Security Response/
  3. W32.HLLW.Sodabot

W32.HLLW.Sodabot

Risk Level 1: Very Low

Discovered:
December 27, 2002
Updated:
February 13, 2007 11:54:46 AM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.HLLW.Sodabot has backdoor Trojan capability, which allows a hacker to gain control of the compromised computer. The worm can update itself by checking for newer versions over the Internet. W32.HLLW.Sodabot disguises itself as a popular movie, game, or software file. The worm attempts to spread across KaZaA and Morpheus file-sharing networks, by tricking KaZaA and Morpheus users into downloading the program and opening it. It also attempts to spread itself through the Internet Relay Chat (IRC).

This threat is compressed with UPX and ASPack.

Antivirus Protection Dates

  • Initial Rapid Release version December 30, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version December 30, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date December 30, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Medium
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver