Content

Exploit-MS04-007

Type
Trojan
SubType
Exploit
Discovery Date
02/14/2004
Length
varies
Minimum DAT
4326 (02/18/2004)
Updated DAT
4385 (08/11/2004)
Minimum Engine
5.1.00
Description Added
02/15/2004
Description Modified
03/25/2004 10:53 PM (PT)
Risk Assessment
Corporate User
Low
Home User
Low

Tab Navigation

Characteristics

This detection covers a tool, which exploits the Microsoft Security Bulletin MS04-007 vulnerability.  The exploit source code is published on the Internet.  For more information on this vulnerability, please refer to MS Vulnerabilities MS04-005 - 007

Symptoms

N/A This is an attack tool, to exploit vulnerable remote systems.

Method of Infection

N/A This is an attack tool, to exploit vulnerable remote systems.

Removal

All Users:
Use specified engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations

Variants

Variants

    N/A

All Information

Overview -

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Characteristics

Characteristics -

This detection covers a tool, which exploits the Microsoft Security Bulletin MS04-007 vulnerability.  The exploit source code is published on the Internet.  For more information on this vulnerability, please refer to MS Vulnerabilities MS04-005 - 007

Symptoms

Symptoms -

N/A This is an attack tool, to exploit vulnerable remote systems.

Method of Infection

Method of Infection -

N/A This is an attack tool, to exploit vulnerable remote systems.

Removal -

Removal -

All Users:
Use specified engine and DAT files for detection and removal.

Additional Windows ME/XP removal considerations

Variants

Variants -

    N/A