1. Symantec/
  2. Security Response/
  3. W32.HLLW.Sodabot


Risk Level 1: Very Low

December 27, 2002
February 13, 2007 11:54:46 AM
Systems Affected:

W32.HLLW.Sodabot has backdoor Trojan capability, which allows a hacker to gain control of the compromised computer. The worm can update itself by checking for newer versions over the Internet. W32.HLLW.Sodabot disguises itself as a popular movie, game, or software file. The worm attempts to spread across KaZaA and Morpheus file-sharing networks, by tricking KaZaA and Morpheus users into downloading the program and opening it. It also attempts to spread itself through the Internet Relay Chat (IRC).

This threat is compressed with UPX and ASPack.

Antivirus Protection Dates

  • Initial Rapid Release version December 30, 2002
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version December 30, 2002
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date December 30, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube