W32.Gaobot.ZX is a minor variant of
W32.Gaobot.SY. This worm attempts to spread through network shares with weak passwords, and it also allows attackers to access an infected computer using a predetermined IRC channel.
The worm uses multiple vulnerabilities to spread, including:
This variant is often compressed with Yoda's Cryptor, PE_Patch, and UPX.
Note: Virus definitions released April 16, 2004 contained a modification to this detection to account for the discovery of a minor variant.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
