Editing Agobot (section)

===Gaobot.ee===
Gaobot.ee is a variant of Agobot. It is also known as the W32.HLLW.Gaobot.EE. It is a malicious [[computer worm]] that tends to come from the [[Peer-to-peer|P2P]] network Ares, installing from its virus form, ''Ares.exe''. It has rather odd characteristics for a virus, with the unique ability to [[download]] and install random files (perhaps to create more sharers) from its members, such as [[music]], [[pornography]], and even full [[game]]s. Gaobot.ee is a worm that sends large numbers of [[E-mail spam|unsolicited e-mails]] using its own [[Simple Mail Transfer Protocol|SMTP]] engine. This worm also opens a backdoor on a random [[Transmission Control Protocol|TCP]] port, notifies attackers through a predetermined [[Internet Relay Chat|IRC]] channel, and attempts to terminate various security products and system monitoring tools.

Its security level is low, hardly doing any damage to a computer. However,  it has been reported to download and install spyware, more viruses, trojans, and worms, although this is not as yet officially been proven.<ref>{{Cite web|url = http://www.symantec.com/security_response/writeup.jsp?docid=2003-121116-2134-99|archive-url = https://web.archive.org/web/20070105071309/http://www.symantec.com/security_response/writeup.jsp?docid=2003-121116-2134-99|url-status = dead|archive-date = January 5, 2007|title = W32.HLLW.Gaobot.EE|date = |accessdate = |website = Symantec Security Response/ W32.HLLW.Gaobot.EE|publisher = Symantec|last = |first = }}</ref>