Buck said:W32.Korgo.C is a worm that propagates by exploiting the LSASS vulnerability on TCP port 445 (as described in Microsoft Security Bulletin MS04-011) and opens a backdoor on TCP ports 113 and 3067.
Systems Affected:
Windows 2000, Windows XP
Systems Not Affected:
DOS, Linux, Macintosh, Macintosh OS X, Novell Netware, OS/2, UNIX, Windows 95, Windows 98, Windows Me, Windows NT
link source