Zotob.b may be affecting some XP SP2/2003 installs



As I noted yesterday, virii typically get updated and improved. Yesterdays reports about the zotob virus noted that Windows Xp service pack 2 and Windows 2003 were not affected by the new worm. Today however, the sans institute is reporting that zotob may be affecting some XP sp2 and 2003 installs. It appears that it uses something called NULL sessions.


Null sessions are disabled by default on XP SP2 and 2003, but under some server scenarios they may have been enabled.

Additionaly some antivirus vendors are claiming that Windows 95/98/ME and NT might be able to spread the worm but not be infected by it. (?So I guess the code runs on the platform but doesn’t infect it remotely.?)

Related Posts

Blog Traffic Exchange Related Posts
  • Zotob Worm According to The Sans handlers diary, a worm exploiting one of the security vulnerabilities disclosed last week by Microsoft, is in the wild and spreading. The worm tagged as zotob.a exploits the ms05-039 vulnerability. (Sans reminds us that ms02-039 was the vuln. targetted by the slammer worm. Interesting coincidence.) They......
  • US-CERT talks spyware US-CERT is addressing the issue of spyware. According to Spyware Confidential, they've released a document (pdf) on the matter, including techniques to guard against spyware. Education and awareness are two elements that are highly emphasized. Among their recommendations: 1. Don't trust unknown or known high-risk sources. 2. Read the fine......
  • Lack of working exploit does not mean Windows 98 is safe I want to try to clarify a point. I've spent a couple days trying to get current exploits to work on a Windows 98 SE virtual machine. Not to prove that Windows 98 is safe, but to determine if current exploits affect Windows 98. Yesterday evening there were apocalyptic headlines......
Blog Traffic Exchange Related Websites
  • Lending Club vs Prosper -- The 1st 100 Days Recap and Modest Proposal Last week week I wrote a comparison of Prosper and Lending Club based entirely on loan volume in reaction to the Lending Club claim: 100 Days and a Million Dollars in Loans! Prosper had 2.6 times the loan volume: Lending Club vs Prosper — The First 100 Days Take 3 Lending......
  • New Loan Funded — Try this one more time, group leader, wantabe borrower — $19,500 at 14.34% — AA Credit — DTI 59% A new loan funded (Try this one more time, group leader, wantabe borrower  – $19,500 at 14.34%).  I participated via my standing order RL Overlooked.  The borrower had AA credit, a 59% DTI, and is a homeowner.  This was a non autofunding loan.  As a reminder my standing orders (and manual bids) only......
  • Protecting Yourself On The Internet Since its beginning in 1990 the online market place has revolutionised the way the world shares info. Unfortunately, it in addition has opened up a whole new world with bad people doing bad things. Illegal material hasn't been so easily available Big Dog Formula to tempt probably the most innocent......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site