Quote Originally Posted by TripleRLtd
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
They are right, though:
It's the variant: W32.Welchia worm
I missed it at first.
http://securityresponse.symantec.com...chia.worm.html
I would have had a hard time believing it was anything else but Blaster or a variant with those symptoms. Still I've been known to be wrong before.