Korgo Virus next up to bat

SpinnerSpinner Birmingham, UK
edited June 2004 in Science & Tech
Slashdot has brought a new virus to light called Korgo. Korgo is a variant of the sasser worm - it uses the same Windows vulnerability. This particular little rogue comes equipped with a nasty keylogger and can infiltrate a system directly via the Internet or LAN without the user even knowing it.

Visit Windows Update, make sure you have anti-virus software installed and make sure it's up-to-date and that is has the latest definitions, and of course make sure you have a firewall installed and that it is also up-to-date and turned on.

View: Removal Tool from Symantec
View: MS Security Bulletin + Patch
View: Symantec Security Response
"W32.Korgo.F is a minor variant of W32.Korgo.E. It is a worm that attempts to propagate by exploiting the Microsoft Windows LSASS Buffer Overrun Vulnerability (BID 10108) on TCP port 445. It also listens on TCP ports 113, 3067, and other random ports."
Source: Slashdot

Comments

Sign In or Register to comment.