
90 ◾ Malicious Bots
Ago created his own private forum community to support his circle of friends
and AgoBot clients, at www.harr0.com. He sold private AgoBot creations, designed
to avoid anti-virus detection or feature additional functionality, for $50–250 per
u
nique binary. By November 2003, 187 users were registered on the Harr0.com
site with 300 unique posts. A screenshot of the website is shown in Figure 6.3, with
hundreds of posts from members and 46 from Ago himself to date at the time of
the screen capture.
In September 2003, just a month after the Blaster worm hit, Welchia, SoBig,
a
nd Dumaru took the world by storm in the “Year of