Network worm uses weak Windows passwords
Say hello to a network worm which attempts to compromise and spread through Windows machines with weak, default passwords. Called Deloder, the worm also tries to drop a backdoor component.
And yes the worm is spreading through vulnerable machines - albeit modestly, according to Symantec.
The worm spreads by scanning random IP addresses, trying to connect on Port 445. Port 445 (Microsoft SMB over TCP/IP) allows outsiders to access Windows file shares.
This should normally be blocked by a firewall, of course, so home users (or universities with weak security in place) are probably more at risk here.
[ Read more ]
For in-depth information on computer viruses, visit the Viruses section of HNS.