Zotob worm goes after Windows 2000 users!

Question

A new worm that specifically targets Windows 2000 users in in the wild!

Answer

This question was answered on August 15, 2005. Much of the information contained herein may have changed since posting.

Three variants of the Zotob worm have been identified by The Symantec Security Response web site. The worm preys on a Windows vulnerability that was recently announced by Microsoft.

Systems running the Windows 2000 operating system (typically used in business networks) are specifically targeted by the worm, which is scanning the Internet looking for vulnerable systems. (Systems behind a firewall are safe from Internet scans, but can be infected via e-mail attachments.)

There are conflicting reports from various anti-virus resources that claim the worm affects any or all versions of Windows, however, Microsoft has posted this information about Zotob.

<i>Our recommendation is for all Windows users to update their systems to plug this vulnerability , regardless of which version they are running.

For additional information, including a list of possible subject, message, and file extensions to expect, and removal instructions, click <a href="http://www.sarc.com/avcenter/venc/data/w32.zotob.c@mm.html" target="_">here</a>.

As always, don't open e-mail attachments unless you're expecting them from a trusted source.

Author

Posted by Chad of Data Doctors on August 15, 2005