| |
|
| |
W32.Welchia.Worm |
| |
|
| |
Description:
The W32.Welchia worm (also known as W32/Nachi.worm, WORM_MSBLAST.D,
Lovsan.D) is similar to the 32.Blaster worm. |
| |
|
| |
It exploits the following Microsoft vulnerabilities: |
| |
|
| |
| 1. |
DCOM
RPC - targets Windows XP systems via TCP port
135 |
| |
Click on the following links to download
the patch: |
| |
|
|
| 2. |
WebDav
- targets systems running Microsoft IIS 5.0 via TCP
port 80 |
| |
Click on the following links to download
the patch: |
| |
|
|
| |
Removal Tools: W32.Welchia
Worm Removal tool (Symantec) or .zip
version |
| |
|
| |
Virus Details: Virus
details |