SpywareGuide powered by Actiance Security Labs
Search SpywareGuide Database & Site
Home Access the Guide
List of Products List of Companies List of Categories
Tools
X-RayPC
Terms and Definitions
 
Full Name:
SoundBot Websearch   Read More
Type: Worm
Also Known as: W32/Polybot.l!irc (Mcafee)
SG Index: 9 [Explain]
Removal tools: List of products that detect/remove/protect against SoundBot:
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.

    Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
    Comment: SoundBot appears as Soundman.exe in the system32 directory of the infected computer. Once infected with this worm, it will map all endpoints on the victim's network. It specifically looks for open ports and weak login credentials. It also disables several security applications upon installation to avoid detection.
       
    Properties:
  •  Adds other software
  •  Allows remote connect
  •  Allows remote control
  •  Alters Key Windows Components
  •  Attacks security software
  •  Autostarts/Stays Resident
  •  Connects to the internet
  •  Force, hidden or stealth install
  •  Has Updater
  •  Installs Through Exploit
  •  Logs passwords
  •  Opens ports
  •  Port agility
  •  Reveals internal network
  •  Rootkit
  • Click here to leave feedback for this product

    Recent Modifications
    2013-4-10  BeeBus
    2012-12-18  JT.Moonwalk
    2012-12-18  Sadbiz
    2012-12-18  Troj.GoogleBot
    2012-12-18  W32.Licat Worm
    2012-11-16  CoolWebSearch
    2012-6-21  AntiSpywareXP
    2012-6-21  Bget
    2012-6-21  Dloader.cao.1
    2012-6-21  PaintBrush
     
    Company  | Site and Spyware FAQ
    © Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy