Home→Descriptions→Net-Worm.Win32.Padobot.gen
| Detected | Jun 01 2004 09:15 GMT |
| Released | Oct 06 2004 16:51 GMT |
| Published | Jun 01 2004 09:15 GMT |
Already known variants of Worm.Win32.Padobot and new variants will be detected using this definition.
Generic detection is based on the analysis of code from known variants. Similar functions will be searched for when scanning; this makes it highly likely that new variants of the worm will be detected.
Net-Worms propagate via computer networks. The distinguishing feature of this type of worm is that it does not require user action in order to spread.
This type of worm usually searches for critical vulnerabilities in software running on networked computers. In order to infect the computers on the network, the worm sends a specially crafted network packet (called an exploit) and as a result the worm code (or part of the worm code) penetrates the victim computer and activates. Sometimes the network packet only contains the part of the worm code which will download and run a file containing the main worm module. Some network worms use several exploits simultaneously to spread, thus increasing the speed at which they find victims.
Net-Worm.