- July 2, 2004
- February 13, 2007 12:24:58 PM
W32.Korgo.W is a worm that attempts to propagate by exploiting the Microsoft Windows LSASS Buffer Overrun Vulnerability (described in Microsoft Security Bulletin MS04-011
) on TCP port 445.
This variant also attempts to download and execute a file from a remote Web site.
Antivirus Protection Dates
Initial Rapid Release version July 2, 2004
Latest Rapid Release version September 28, 2010 revision 054
Initial Daily Certified version July 2, 2004
Latest Daily Certified version September 28, 2010 revision 036
Initial Weekly Certified release date July 5, 2004
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Asuka Yamamoto