W32.Spybot.ACYR worm - Exploits the unpatched Symantec SYM06-010 issue

This new IRC based threat attempts to spread using a number of security exploits, including the SYM06-010 vulnerability recently highlighted by several security sources.  Staying up-to-date on all software updates as well AV protection, can prevent the 7 different methods this worm tries to infect vulnerable systems.  

SC Magazine Article

Symantec Weblog

W32.Spybot.ACYR - New Symantec Removal Tool (recommended)

Spread by exploiting the following vulnerabilities:

• The Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability (described in Microsoft Security Bulletin MS03-026)
• The Microsoft Windows Message Queuing Remote Buffer Overflow Vulnerability (as described in Microsoft Security Bullettin MS05-017)
• The Microsoft ASN.1 Library Multiple Stack-Based Buffer Overflow vulnerabilities (as described in Microsoft Security Bulletin MS04-007)
• The Microsoft Windows Plug and Play Buffer Overflow Vulnerability (as described in Microsoft Security Bullettin MS05-017)
• The Microsoft Windows Server Service Remote Buffer Overflow Vulnerability (as described in Microsoft Security Bulletin MS06-040)
• Multiple Vendor FTPD realpath Vulnerability (as described in CVE-1999-0368)
• Symantec Client Security and Symantec AnitVirus Elevation of privilege (as described in Symantec Advisory SYM06-010)