1. Symantec/
  2. Security Response/
  3. W32.HLLW.Gaobot.AO


Risk Level 2: Low

September 30, 2003
February 13, 2007 12:13:04 PM
Also Known As:
W32/Gaobot.worm.gen.b [McAfee], Backdoor.Agobot.3.x [Kaspersky
Systems Affected:

W32.HLLW.Gaobot.AO is a minor variant of W32.HLLW.Gaobot.AF. It attempts to spread to network shares that have weak passwords and allows hackers to access an infected computer through IRC.

The worm uses multiple vulnerabilities to spread, including: W32.HLLW.Gaobot.AO is compressed with UPX.

Note: Virus definitions dated prior to October 1, 2003 may detect this worm as a hack tool.

Note: Virus definitions dated November 19, 2003 and later contain a modified W32.HLLW.Gaobot.AO signature to account for the discovery of a minor variant.

Antivirus Protection Dates

  • Initial Rapid Release version October 1, 2003
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version October 1, 2003
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date October 1, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Heather Shannon

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube