1. /
  2. Security Response/
  3. W32.HLLW.Gaobot.AO

W32.HLLW.Gaobot.AO

Risk Level 2: Low

Discovered:
September 30, 2003
Updated:
February 13, 2007 12:13:04 PM
Also Known As:
W32/Gaobot.worm.gen.b [McAfee], Backdoor.Agobot.3.x [Kaspersky
Type:
Worm
Systems Affected:
Windows 2000, Windows NT, Windows XP


W32.HLLW.Gaobot.AO is a minor variant of W32.HLLW.Gaobot.AF. It attempts to spread to network shares that have weak passwords and allows hackers to access an infected computer through IRC.

The worm uses multiple vulnerabilities to spread, including: W32.HLLW.Gaobot.AO is compressed with UPX.


Note: Virus definitions dated prior to October 1, 2003 may detect this worm as a hack tool.








Note: Virus definitions dated November 19, 2003 and later contain a modified W32.HLLW.Gaobot.AO signature to account for the discovery of a minor variant.


Antivirus Protection Dates

  • Initial Rapid Release version October 1, 2003
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version October 1, 2003
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date October 1, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: More than 1000
  • Number of Sites: More than 10
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Medium
Writeup By: Heather Shannon

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver