Woredbot.c is a dangerous worm that spreads to network computers by exploiting known vulnerabilities of the Microsoft Windows operating system. It also propagates through network shares and Microsoft SQL servers. Furthermore, the parasite can spread through instant messages using popular clients such as ICQ, AIM, MSN Messenger and Yahoo! Messenger. Once installed, Woredbot.c runs a payload. It disables essential system components and attempts to terminate running firewalls, antiviruses, anti-spyware and anti-malware software. Woredbot.c also opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can download and run arbitrary files, execute any system commands, record user keystrokes, launch Denial of Service (DoS) attacks and search for vulnerable hosts. Furthermore, Woredbot.c can be used to run a hidden proxy service. The parasite is able to steal confidential information the user enters on banking and financial web sites. Woredbot.c runs as a service on every Windows startup.