Mytob (Zotob) Worm Alert!

Dear Consigliere,
                        Important information about current security risks.

Mytob (Zotob) Worm Alert!

The latest variants of the Mytob worm use a vulnerability in the Windows Plug&Play interface to infect Windows systems. a-squared detects the worm as Net-Worm.Win32.Mytob.cd, Mytob.cf, Mytob.ch and its automatically installed backdoor trojan as Backdoor.Win32.IRCBot.et. Online newspapers usually use the name Zotob-Worm.

The vulnerability mainly affects Windows 2000, but may be used to exploit Windows XP and 2003 Servers too, Microsoft says. Windows 98 and ME systems are not affected.

Once active, the worm downloads an IRC backdoor trojan from the internet which is used to remotely control the computer.

Protection:

Ensure, that you have already applied the Windows patch with the number [ KB899588 ] with your system. You can download the patch on the Microsoft website or use the automatic Windows-Update to install it automatically.

KB899588:[ http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx ]
Windowsupdate: [ http://www.windowsupdate.com ]

a-squared Free users are advised to run the online update, to be able to remove the worm if the computer becomes infected.

a-squared Personal users are protected, even if they don't have the latest online updates installed. The new IDS technology of the background guard immediately detects and blocks the worm with the behavior analysis if it manages to run.

I f you have any problems with this page or with anything else, feel free to consult our [ FAQ ] and if you can't find the answer there, [ contact us ].
[ Rate This Page ]