The Sdbot functionality in the worm is designed to contact the IRC server named, irc.blackcarder.net , join a specified channel, and wait for further instructions. This bot can accept commands to download and execute other programs. The bot also contains code to spread via the LSASS exploit http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
| Attributes | Values |
|---|---|
| rdfs:label |
|
| rdfs:comment |
|
| dcterms:subject | |
| dbkwik:malware/pro...iPageUsesTemplate | |
| abstract |
|