New Windows Worm

[Geoff]

Internet Storm Center's Diary reported today: Due to a number of very well working Windows exploits for this weeks patch set, and the zero-day Veritas exploit, we decided to turn the Infocon to yellow. The Internet Threat Level meters are at level 2/4 because of Windows Plug and Play vulnerability's several exploit codes too

 

There's also a worm floating about (mentioned in the diary) that uses the new vulnerabilities to download some nasty trojans and spread itself around. The worm is called Zotob.A.

[E1uSiV3]

Cheers for the info geoff, time for another test of WSUS and Sophos methinks...

[Geoff]

And its still rattling about.

 

http://www.theinquirer.net/?article=25493

[Geoff]

on 17 August 2005 the Microsoft Windows

Malicious Software Removal Tool has been updated with added detection

and cleaning capabilities for the following Malicious Software:

 

* Zotob.A

* Zotob.B

* Zotob.C

* Zotob.D

* Zotob.E

* Bobax.O

* Esbot.A

* Rbot.MA

* Rbot.MB

* Rbot.MC

 

 

The updated version of the Microsoft Windows Malicious Software Removal Tool is available for download from the Download Center at this location: http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en