We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Exploit:Win32/Siveras.E
Detected by Microsoft Defender Antivirus
Aliases: Worm.Win32.Downloader.ak (Kaspersky) New Malware.aj (McAfee) W32/Suspicious_U.gen (Norman) Mal/Packer (Sophos) Packed/Upack (VirusBuster)
Summary
Exploit:Win32/Siveras.E is detection for specific known malware used to exploit a vulnerability in the Domain Name System (DNS) Server Service. This vulnerability impacts Microsoft Windows 2000 Server Service Pack 4, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2.
For vulnerability details and patch information, please see Microsoft Security Bulletin MS07-029 at http://www.microsoft.com/technet/security/bulletin/ms07-029.mspx.
Use the Microsoft Safety Scanner to detect known malware that exploits this vulnerability. Safety Scanner detects this malware as Exploit:Win32/Siveras.E. Note that exploit of the vulnerability may not be file-based or the malicious files might be removed by the attacker after successful exploit.