fw: Mytob worm

[Linuxgirl]

Dear LG

Important information about current security risks.

--- Mytob (Zotob) Worm Alert! ---

The latest variants of the Mytob worm use a vulnerability in the Windows
Plug&Play interface to infect Windows systems. a-squared detects the worm as
Net-Worm.Win32.Mytob.cd, Mytob.cf, Mytob.ch and its automatically installed
backdoor trojan as Backdoor.Win32.IRCBot.et. Online newspapers usually use
the name Zotob-Worm.

The vulnerability mainly affects Windows 2000, but may be used to exploit
Windows XP and 2003 Servers too, Microsoft says. Windows 98 and ME systems
are not affected.

Once active, the worm downloads an IRC backdoor trojan from the internet
which is used to remotely control the computer.

Protection:

Ensure, that you have already applied the Windows patch with the number
KB899588 with your system. You can download the patch on the Microsoft
website or use the automatic Windows-Update to install it automatically.

KB899588: http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx
Windowsupdate: http://www.windowsupdate.com

LG

 

[Bill Sanderson]

Thanks LG. We've had some discussion of this here--this is a good reminder.