Sagevo is a worm that spreads to vulnerable computers by exploiting known security flaws in Symantec antivirus software. Once successfully installed, the parasite continues its spreading routine. It also runs a payload. The worm downloads from the Internet and executes a backdoor that provides the attacker with unauthorized remote access to the compromised computer. Sagevo may also attempt to stop some system services.