|
Description:
This memory-resident worm spreads by dropping copies of itself in several network shared folders, using cached user names and passwords to gain access. It may also use a long list of user names and passwords, apart from those it gathers.
This worm also exploits the following Windows vulnerabilities to propagate:
- SQL Server Buffer Overflow vulnerability
- IIS/WEBDAV vulnerability
- RPC/DCOM vulnerability
- LSASS vulnerability
More information about these vulnerabilities can be found on the following pages:
This worm is also able to detect systems installed with DameWare, as well as those affected by the following malware variants:
It has backdoor capabilities, and may execute commands coming from a remote malicious user. It also steals the Windows Product ID, as well as the CD keys of certain applications.
For additional information about this threat, see:
Solution
Technical Details
Description created: Feb. 2, 2005 5:37:29 PM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
