-=> BO SIMONSEN wrote to KURT WISMER <=-

 KW> How it spreads
 KW>     * Network shares

 KW> Advanced
 KW> W32/Sdbot-SW is a worm which attempts to spread to remote network
 KW> shares. It also contains backdoor Trojan functionality, allowing
 KW> unauthorised remote access to the infected computer via IRC channels
 KW> while running in the background as a service process.

 BS> Just me or doesn't it makes sense? IRC and local network shares?

 BS> If it just was spread during network shares, it would be pretty
 BS> harmless..

i'm not sure i follow what you're saying...

it spreads via unprotected (or poorly protected) network shares and once
it's compromized a system it opens up a backdoor via... what part of
this doesn't make sense?

 
--- MultiMail/Win32 v0.43