Home Malware Programs Worms W32.Welchia.B.Worm

W32.Welchia.B.Worm

Posted: March 28, 2006

W32.Welchia.B.Worm is a variant of W32.Welchia.Worm. If the version of the operating computer of the infected PC is Chinese, Chinese, Korean, or English, the worm will attempt to download the Microsoft Workstation Service Buffer Overrun and Microsoft Messenger Service Buffer Overrun patches from the Microsoft's Windows Update Web site, install it, and then restart the PC.
Also attempts to remove the W32.Mydoom worm.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svchost.exe
Loading...