A new worm on the internet has been discovered today. W32.Welchia isn't any ordinary worm since it helps its 'victims' exterminate the W32.Blaster worm.
How kind of them.
"Initial analysis has determined that the worm looks for the existence of Msblast.exe, dropped by the W32.Blaster.Worm, and deletes it if present.
The worm also attempts to download the DCOM RPC vulnerability patch from Microsoft's update site. If the update has been successful, the worm will reboot the computer so the update takes effect." - Symantec
Source : Nikush.com
More Information @Symantec
How kind of them.
"Initial analysis has determined that the worm looks for the existence of Msblast.exe, dropped by the W32.Blaster.Worm, and deletes it if present.
The worm also attempts to download the DCOM RPC vulnerability patch from Microsoft's update site. If the update has been successful, the worm will reboot the computer so the update takes effect." - Symantec
Source : Nikush.com
More Information @Symantec
