bot worm

A bot worm is a self-replicating malware program that resides in current memory (RAM), turns infected computers into zombies (or bots) and transmits itself to other computers. A bot worm may be created with the ultimate intention of creating a botnet that functions as a vehicle for the spread of viruses, Trojans and spam.

Typically, bot worms have exploited vulnerabilities in Windows operating systems but attacks are increasingly targeting other types of applications, including antivirus software. In December 2006, a bot worm called Big Yellow exploited a vulnerability in the corporate version of Symantec's security software.

One of the earliest bot worms was Zotob, which exploited a buffer overflow vulnerability, allowing malicious hackers to gather personal and financial information from targeted computers and networks. Sometimes the presence of a bot worm causes the infected computer to repeatedly crash. Often, however, the user of an infected computer may not be aware of the trouble until identity theft has actually caused credit problems or an updated anti-malware program detects the presence of the bot worm.

The best defense against bot worms is to be sure the latest patches are installed in any Windows-based computer exposed to the Internet. In addition, anti-virus and anti-spyware programs should be run and updated on a regular basis.

Read more about bot worm: - Security Focus describes some common bot worm threats. - Bot worms have been aimed at anti-malware programs.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

BROWSE BY TAG Malware, Viruses, Trojans and Spyware,   Information Security Threats,   Enterprise Data Protection,   Identity Theft and Data Security Breaches,   VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT How to defend against rogue DHCP server malware Rogue DHCP server malware is a new twist on an old concept. The good news is that defenses exist; the bad news is that many organizations haven't... New Trojan stealing FTP credentials, attacking FTP websites A new Trojan has collected up to 80,000 unique FTP server logins and is injecting malicious code into thousands of FTP websites. Cybercriminals exploit Michael Jackson, Farrah Fawcett deaths Security researchers report malicious spam, poisoned search engine results just hours after the deaths of pop star Michael Jackson and actress Farrah...

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary directory traversal  (SearchSecurity.com) Directory traversal is a form of HTTP exploit in which a hacker uses the software on a Web server to access data in a directory other than the... government Trojan  (SearchSecurity.com) A government Trojan is spyware installed on a computer or network by a law enforcement agency for the purpose of capturing information relevant to a...