Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Trojan/Backdoor - Agobot.FO Detection

Critical

Synopsis

The remote host has a backdoor installed

Description

The remote host has the Agobot.FO backdoor installed. This backdoor is known to scan local networks for common Microsoft vulnerabilities, scan local networks for exploitable DameWare systems, brute force local Microsoft machine User accounts, connect to an IRC channel and setup a BOT for remote command execution.

Solution

This backdoor should be immediately removed from the infected systems and manually cleaned.