Sophos

W32/Agobot-HL

Aliases
  • Backdoor.Agobot.gen
  • W32/Gaobot.worm.gen.d
Category
Type
What to do
Prevalence low high

Summary

 
Included in our products from June 2004 (3.82)
Protection available since 5 May 2004 15:40:57 (GMT)
Last updated 5 May 2004 22:16:32 (GMT)
Detected by All Sophos products

Action

More Information

W32/Agobot-HL is a member of the W32/Agobot family of worms.

The worm creates a copy of itself named svvhost.exe in the Window sytem folder
and adds the following registry entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Service
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Windows Service

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer