SoftwareTipsandTricks.com
Home Forums Windows 7 Security Tips
Forums

Windows 7
Windows Vista
Windows XP

Security Tips
Troubleshooting
Keyboard Shortcuts
Encyclopedia


Drivers

Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Articles
Hot Downloads


Privacy Policy
Contact Us







  wmiprvsw.exe

Name wmiprvsw.exe

Description

W32.Gaobot.AFC is a worm that spreads through open network shares and several Windows vulnerabilities including:
- The DCOM RPC vulnerability (described in Microsoft Security Bulletin MS03-026) using TCP port 135.
- The WebDav vulnerability (described in Microsoft Security Bulletin MS03-007) using TCP port 80.
- Exploits the Microsoft Windows Local Security Authority Service Remote Buffer Overflow (described in Microsoft Securiy Bulletin MS04-011).

The worm also spreads through backdoors that the Beagle and Mydoom worms and the Optix family of backdoors install.
The worm can also act as a backdoor server program and attack other systems.
Additionally, the worm attempts to stop the process of many antivirus and security programs.

Copies itself as %System%\wmiprvsw.exe.

Adds the value: "System Updater Service=wmiprvsw.exe
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Adds the value: "System Updater Service=wmiprvsw.exe"
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Automatic removal:
Use antivirus (also check How To Remove section)Startup Optimizer.


Still have a problem? Ask for help at our discussion forum.



Search Dangerous Files :
 

: : Recent posts at Forums : :

ksvlnwmyrf

mmczpvclay

wqtpjlebic

gdxjvdolnz

Asiame scam

lewgfvvybq

Full-grown galleries

dpknvavgng

gbqupatpgh

gitvrtxpqd

Pictures from community networks

My unfamiliar website

kredyt bez zaświadczeń

srjkmpwhvc

eykjzwnfmb

lzazwbuaue

oorgmdeofc

jxwnysqmsr

tffhcadofk

yogemfgdoc

klfzijefrn

jdsfprbvwp

Установка плё

brrsrzzrbt

Архитектурны

oqeimpynas

wwfxpckupo

Бесплатные порно фото с ежедневным обнов

xwlrpvkgsm

kwqwpmnauq




SoftwareTipsandTricks, All Rights Reserved.