2/7: Agobot-PI Worm Changes Data
February 7, 2005
Sophos Inc. is updating its alert on the Agobot-PI worm, which is getting a medium-threat rating.

The worm turns off anti-virus applications, allows remote access to infected computers and changes data on the machine. It also steals information and is able to download code from the Internet, according to Sophos, an anti-virus and anti-spam company with U.S. headquarters in Lynnfield, Mass.

Agobot-PI is a network worm with backdoor functionality for the Windows platform. The backdoor component runs continuously in the background.

The worm also is capable of spreading to computers on the local network protected by weak passwords, report Sophos analysts.

Technical details can be found at Sophos page.