Sophos

Troj/Winser-A

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from May 2006 (4.05)
Protection available since 5 January 2005 21:43:46 (GMT)
Last updated 22 March 2006 15:08:47 (GMT)
Detected by All Sophos products

Action

Please follow the instructions for removing Trojans.

Details about securing WINS servers affected by the vulnerability are available at: http://support.microsoft.com/kb/890710/

Apply patch
http://www.microsoft.com/technet/security/bulletin/MS04-045.mspx

More Information

Troj/Winser-A is a Trojan for the Windows platform.

The Trojan can be used to exploit the Windows Internet Naming Service (WINS) buffer overflow vulnerability (MS04-045) to gain remote shell access on Microsoft Windows servers running the WINS service.

A patch is available from Microsoft for the WINS buffer overflow vulnerability at:

http://www.microsoft.com/technet/security/bulletin/MS04-045.mspx

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer