Description published Nov 03, 2008|Description updated Apr 16, 2011

Trojan:Win32/Wecorl.A

Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: W32.Wecorl (Symantec)

Trojan:Win32/Wecorl.A is a trojan that attempts to exploit a vulnerability in SVCHOST.EXE on other computers to download and install other malware. If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled.
 
On targeted hosts running Windows 2003, XP, 2000 or NT, this remote attack may be performed by an unauthenticated user. Successful exploitation of the vulnerability on systems with default installations of Windows Vista and Windows Server 2008 require authentication due to protections introduced as part of user access control (UAC) that enforce additional levels of integrity.
 
Microsoft strongly recommends that users apply the update referred to in  Security Bulletin MS08-067 immediately.

 

Latest News
VIEW ALL
 
Show/Hide feedback form