Skip to main content
Published Nov 03, 2008 | Updated Sep 15, 2017

Trojan:Win32/Wecorl.A

Detected with Windows Defender Antivirus

Aliases: No associated aliases

Summary

Trojan:Win32/Wecorl.A is a trojan that attempts to exploit a vulnerability in SVCHOST.EXE on other computers to download and install other malware. If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled.
 
On targeted hosts running Windows 2003, XP, 2000 or NT, this remote attack may be performed by an unauthenticated user. Successful exploitation of the vulnerability on systems with default installations of Windows Vista and Windows Server 2008 require authentication due to protections introduced as part of user access control (UAC) that enforce additional levels of integrity.
 
Microsoft strongly recommends that users apply the update referred to in  Security Bulletin MS08-067 immediately.
Microsoft strongly recommends that users apply the update referred to in  Security Bulletin MS08-067 immediately.
 
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Follow us