Spybot worm spreads exploiting Symantec and Microsoft flaws

Adware - Spyware : Spybot worm spreads exploiting Symantec and Microsoft flaws

Posted by Max on 2006/12/1 15:55:16 (1576 reads)

A new variant of a malicious bot program is spreading exploiting a flaw in Symantec's antivirus software as well as through several holes in Microsoft code.

The worm, called 'Spybot.ACYR' by Symantec and 'Sdbot.worm!811a7027' by McAfee, seems to be targeting educational institutions, according to a blog item posted by Symantec. The security company said: "We are seeing a spike in traffic on port 2967 with activity only in the dot-edu domain. The impact of the attack is minimal thus far."

This Spybot variation tries to break into computers through a six-month-old vulnerability in Symantec Client Security and Symantec AntiVirus. A fix has been available since 25 May. Symantec said: "Customers who have applied the patch in their environment are unaffected by the worm."

Additionally, the bot worm tries to exploit five flaws in Microsoft Windows, the most recent of which was patched in August and affects Windows file and printer sharing. The oldest Windows flaw of the five which are exploited by the worm dates back to 2004, according to Symantec's alert.

When installed on a PC, Spybot opens a backdoor in the system and connects to an internet relay chat (IRC) server to let the remote attacker control the infected computer. Spybot first surfaced in 2003 and has spawned many offshoots.

Bot software such as Spybot is the most prevalent threat to Windows PCs, according to a recent Microsoft security report. More than 43,000 new variants of such dangerous programs were found in the first half of 2006, making it the most active category of malicious software, Microsoft said.

A computer taken by such a bot is popularly called as a 'zombie PC'. It can be used by criminals as part of a network of bots, or 'botnet', to relay spam and launch cyber attacks. Additionally, hackers often steal the victim's data and install spyware and adware on PCs, to earn a kickback from the spyware or adware maker.

Previous article - Next article

Other articles
2009/11/3 14:55:39 - BitDefender Top Ten Malware Threats for October 09
2009/11/3 14:29:38 - Nov. 09 Microsoft Security Intelligence Report
2009/10/7 15:19:17 - StopSign AntiVirus and Anti-Malware is Windows 7 Compatible
2009/10/7 15:11:26 - New Outlook Backup and Migration Software By Disk Doctors
2009/9/30 4:20:57 - Microsoft Security Essentials, FREE Security Tool Just Released
2009/9/28 14:31:52 - New Rogue Antispyware Cloaked To Infects Computers
2009/9/9 4:31:49 - Trend Micro Proves Leadership in URL Filtering and Web Security
2009/9/9 4:16:20 - New Free Tool to Clean Conficker Once and For All
2009/9/1 8:37:11 - Kaspersky Internet Security 2010 and Kaspersky Anti-Virus 2010 Out Now
2009/9/1 7:54:50 - NEW P2P Advertising Network Protects Users Against Lawsuits And Identity Theft

The comments are owned by the poster. We aren't responsible for their content.

Poster	Thread
ariel823	Posted: 2009/1/10 22:44 Updated: 2009/1/10 22:44
Just popping in Joined: 2009/1/10 From: Posts: 2	Re: Spybot worm spreads exploiting Symantec and Microsoft... film upskirt downblouse, alex model download, sexy renamon girl, inurl htm html php intitle index of last modified parent directory description size doc rtf pdf nudist, nudisme pic photo, young girl gyno video, her tushy massage videos, hypno knockout sex, riya ray nude, www nudebeach4u com, legs world, keral sexy, xusenet free pics, amatuer home nude pictures, australia naked nudes girls, hot desi aunty, films cp company, yasmine lee movies, free 3gp kamasutra videos, vladmodel little extrem, ls model land, session php ext, any 14 year olds wanna strip on cam, underage pedo photos, sexy story of bhabi, lesbian lactaion boobs, peeing, nude teenage camps, intitle index of 15 yo nude jpg, cisco exploration chapter 10 answer yahoo answers