NEWS FROM THE LAB - Thursday, February 12, 2004

New Welchi targets Mydoom Posted by Gergo @ 06:14 GMT

A new variant of the Welchi worm has been found in the wild. The new variant uses several vulnerabilites (eg. RPC/DCOM, WebDAV) to spread. On computers it can infect Welchi.B checks for the presence of the Mydoom.A and Mydoom.B worms and removes them if they are found.

The analysis of Welchi.B in underway and more information will be posted to the description page at