Sophos

W32/RpcSpybot-A

Aliases
  • Win32:RPCexploit
  • Backdoor.Sdbot.au
  • TrojanDropper.Win32.Small.bd
  • Exploit-DcomRPC
  • WORM_RPCSDBOT.A
  • W32.Randex.E
Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 28 September 2003 09:47:20 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing worms.

Download and install the Microsoft patch mentioned above.

More Information


W32/RpcSpybot-A is a worm that exploits the RPC/DCOM vulnerability on computers running the Windows operating system to spread. The worm has a backdoor component that allows a malicious user remote access to an infected computer.

Microsoft issued a patch for the vulnerability exploited by this worm on July 16, 2003. The patch is available from www.microsoft.com/technet/security/bulletin/MS03-026.asp.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer