W32.HLLW.Gaobot.DK is a worm that uses several exploits to spread. It acts as a spam proxy, using the infected computer to send large numbers of unsolicited emails using its own SMTP engine. This worm also opens a backdoor to a predetermined IRC channel.
This worm propagates using multiple vulnerabilities, including:
W32.HLLW.Gaobot.DK gives an attacker complete access to your computer. By default, the worm listens on TCP port 63809 and notifies the attacker through IRC. The worm attempts to terminate various security products and system-monitoring tools.
Note: Virus definitions dated prior to December 9th, 2003 may detect this threat as W32.HLLW.Gaobot.gen.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
