Home Forums Windows 7 Security Tips

Windows 7
Windows Vista
Windows XP

Security Tips
Keyboard Shortcuts


Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Hot Downloads

Privacy Policy
Contact Us


Name avserve2.exe


This worm spreads via the Internet using a vulnerability in the Microsoft Windows LSASS service.
The vulnerability is described in Microsoft Security Bulletin MS04-011, which can be found at:

When launching, the worm registers itself in the system registry autorun key:
avserve2.exe = %WINDIR%\avserve2.exe

The worm scans IP addresses, searching for computers which have the vulnerability described in MS04-011.
A vulnerable computer will launch the command packet "cmd.exe" on TCP port 9996, and will then accept commands to download and launch copies of the worm.

Downloading is carried out via FTP protocol.
In order to do this the worm launches an FTP server on TCP port 5554 and on request from the victim computer loads a copy of itself.
The copy of the worm will be loaded under the name "_up.exe", where "_" is a random number.

To remove this worm you can download free utility from

Still have a problem? Ask for help at our discussion forum.

Search Dangerous Files :

: : Recent posts at Forums : :

Sexual pictures

Delivered grown-up galleries

Mod Project

New plat

Grown up site

Free galleries -Где Гай С

Eroctive - средство дл

Full-grown galleries

Gay blogging accommodation, Daily photos

Learn English

Eroctive - средство дл

Matured placement

Matured placement

Daily updated photo blog with fiery men

Full-grown galleries

Eroctive - средство дл

My new website

Public pictures

Eroctive - средство дл

Latest plat

Full-grown galleries

Pictures from collective networks

Eroctive - средство дл

Grown up purlieus


moncler châle

Full-grown galleries

Callow Poke out

Quotidian updated photo blog with fiery men

SoftwareTipsandTricks, All Rights Reserved.