Mytob (Zotob) Worm Alert!

The latest variants of the Mytob worm use a vulnerability in the Windows Plug&Play interface to infect Windows systems. a-squared detects the worm as Net-Worm.Win32.Mytob.cd, Mytob.cf, Mytob.ch and its automatically installed backdoor trojan as Backdoor.Win32.IRCBot.et. Online newspapers usually use the name Zotob-Worm.

The vulnerability mainly affects Windows 2000, but may be used to exploit Windows XP and 2003 Servers too, Microsoft says. Windows 98 and ME systems are not affected.

Once active, the worm downloads an IRC backdoor trojan from the internet which is used to remotely control the computer.

Protection:

Ensure, that you have already applied the Windows patch with the number KB899588 with your system. You can download the patch on the Microsoft website or use the automatic Windows-Update to install it automatically.

KB899588: http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx
Windowsupdate: http://www.windowsupdate.com

a-squared Free users are advised to run the online update, to be able to remove the worm if the computer becomes infected.

a-squared Personal users are protected, even if they don't have the latest online updates installed. The new IDS technology of the background guard immediately detects and blocks the worm with the behavior analysis if it manages to run.

 

8/17/2005

Discuss this article in the forum

How would you rate the quality of this content?
    Rating: 7.54/9
50 Rating(s)
Poor   Outstanding
  1 2 3 4 5 6 7 8 9  

Our Software Suggestion:

a-squared Anti-Malware Personal
 
ZDNet.deZDNet.deZDNet.deZDNet.deZDNet.de
ZDNet.de best rating

Fight back against Malware!

a-squared Anti-Malware is the perfect addition to your Antivirus- and Firewall-Software and protects your Computer against Malware:

Trojans   Backdoors   Worms  
Dialers   Spyware Rootkits  

Order Now >>>