1. /
  2. Security Response/
  3. W32.HLLW.Gaobot.CA

W32.HLLW.Gaobot.CA

Risk Level 1: Very Low

Discovered:
November 4, 2003
Updated:
February 13, 2007 12:13:18 PM
Also Known As:
WORM_AGOBOT.CA [Trend], W32/Gaobot.worm.gen.b [McAfee]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


W32.HLLW.Gaobot.CA is a minor variant of W32.HLLW.Gaobot.AO. It attempts to spread to network shares that have weak passwords and allows hackers to access an infected computer through an IRC channel.

The worm uses multiple vulnerabilities to spread, including: W32.HLLW.Gaobot.CA is compressed with UPX.

Antivirus Protection Dates

  • Initial Rapid Release version November 4, 2003
  • Latest Rapid Release version August 20, 2008 revision 017
  • Initial Daily Certified version November 4, 2003
  • Latest Daily Certified version August 20, 2008 revision 016
  • Initial Weekly Certified release date November 5, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 3 - 9
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Medium
Writeup By: John Canavan

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver