Zotob details
Monday, August 15th, 2005Here are some details on the zotob worm (s) culled from several sources…. It copies itself to the Windows system folder as BOTZOR.EXE, it modifies the hosts file to frustrate attempts to access antivirus sites. The .b variant copies itself as csm.exe in the Windows System folder. Both variants create a Mutex so that only […]