Sign Up: Free Daily Tech E-letter  
Technology Home
Washtech
Tech Policy
   -Copyright
   -Cybercrime
   -E-Taxes
   -FCC
   -ICANN
   -Security
Government IT
Markets
Columnists
Personal Tech
Special Reports
Jobs

Advertisement
Company Postings
Get Quotes
Press Releases
Tech Almanac

Is Your Computer Infected With Phatbot?

Advertisement


E-Mail This Article
Print This Article
_____Cyber-Security_____
Virus Overwhelms Google, 3 Other Search Engines (The Washington Post, Jul 27, 2004)
Web Worm Spreads, Slows Google Searches (washingtonpost.com, Jul 26, 2004)
Report Faults Cyber-Security (The Washington Post, Jul 23, 2004)
More Security News
Wednesday, March 17, 2004; 6:28 AM

Only computers running Microsoft's Windows operating system can be infected with Phatbot. Experts say the computers most likely to be affected are ones that have not already had the latest software security patches installed and that are not running some sort of firewall program. Phatbot also can inject itself into systems that remain infected by several recent Internet worms, including "Mydoom," "Bagle," "Blaster," and "Slammer."

Phatbot, which is identified by many antivirus programs as a variant of the "Agobot" or "Gaobot" Trojans, is designed to reside on the host computer without drawing too much attention to itself.

Part of the problem with identifying an infection is that once Phatbot infects a system, it will shut down or disable more than 600 programs, including most antivirus and firewall software installed on home computer systems today.

Experts say if a user notices that the program icon for his or her antivirus or firewall software has suddenly disappeared from the computer screen, there is a good chance the PC is infected with Phatbot or another Trojan horse program.

Many users whose computers are infected with Phatbot may find it impossible to keep their antivirus software running long enough to scan their system or remove the infectious file. Antivirus company F-Secure has released a handy tool that helps clean computers infected with the Trojan. It can be downloaded here: ftp://ftp.f-secure.com/anti-virus/tools/f-agobot.exe

For more information on Phatbot, go to:

www.lurhq.com/phatbot.html

www.f-secure.com/v-descs/agobot_fo.shtml

-- Brian Krebs, washingtonpost.com


TechNews.com Home

© 2004 Washingtonpost.Newsweek Interactive

Company Postings: Quick Quotes | Tech Almanac
About TechNews.com | Advertising | Contact TechNews.com | Privacy
My Profile | Rights & Permissions | Subscribe to print edition | Syndication