Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.



13 February 2007
Risk Impact:
File Names:
Systems Affected:


Hacktool.Xdos is a port scanner, with Denial of Service and port flooding capabilities, that could be used maliciously.


Files are detected as Hacktool.Xdos
  • System performance slows
  • Network traffic is increased


The post scanner is not automatically transmitted. Instead it must be placed or downloaded.

Antivirus Protection Dates

  • Initial Rapid Release version 02 October 2014 revision 022
  • Latest Rapid Release version 01 February 2015 revision 020
  • Initial Daily Certified version 03 November 2003
  • Latest Daily Certified version 14 March 2011 revision 038
  • Initial Weekly Certified release date 05 November 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Hacktool.Xdos is a port scanner and contains the functionality to flood ports and launch a TCP Denial of Service attack. The ports and IP addresses for scanning or flooding are configurable. IP addresses may also be accessed at random.

This program drops no files, does not install itself and sets no registry keys. It must be placed or downloaded on the computer.

The following instructions pertain to all Symantec antivirus products that support Security Risk detection.
  1. Update the definitions.
  2. Run a full system scan and delete all the files detected as Hacktool.Xdos.

For specific details on each of these steps, read the following instructions.

1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.

2. Scanning for and deleting the files
  1. Start Norton AntiVirus and make sure that it is configured to scan all the files. For more information on how to do this, read the document, "How to configure Norton AntiVirus to scan all files."
  2. Run a full system scan.
  3. If any files are detected as Hacktool.Xdos, click Delete.