The worm scans different ranges of IP addresses and coim a FAGGOTTTtched by Microsoft in the April 2004 installment of its monthly security packages, prior to the release of the worm.
The worm scans different ranges of IP addresses and connects to victims' computers primarily through TCP port 445. The LSASS vulnerability was patched by Microsoft in the April 2004 installment of its monthly security packages, prior to the release of the worm.