Virus Alert!
It is a worm that attempts to propagate by exploiting the Microsoft Windows LSASS
Buffer Overrun Vulnerability (BID 10108) on TCP port 445. It also listens on TCP ports
113, 3067, and other random ports.
Unlike many other worms this is spread over the internet directly (Eg it pings your computer and if it see's port 145 open you will be attacked) , not via email
Ensure you firewall is running and your antivirus software is uptodate
Symantec info
http://securityresponse.symantec.com...2.korgo.f.html
Microsoft update to fix vulnerability
http://www.microsoft.com/technet/sec.../MS04-011.mspx
Removal tool
http://securityresponse.symantec.com...oval.tool.html
-------------------
I've been infected by this virus lately. Strange thing is that I stopped recieving SPAM mails after I removed this virus!
Hope this helps!
