|
Fast-spreading computer
worms are infecting large enterprises and users all over
the world. The worms are in the Zotob family and exploit
vulnerabilities in Microsoft’s operating systems.
Norman Virus Control with definition files released 17
August or later detect and remove these new worms.
These worms also provide unauthorised access to an
infected computer by installing a backdoor, and have the
capability to spread to remote computers using the PNP
exploit. The worms have bot-fuctionality, meaning that
an infected computer will try to establish a connection
to a predefined IRC server. Users with access to this
server will be able to send commands to the infected
computer. The worms may allow the following commands to
be executed remotely:
- Remove the worms
from the system
- Disconnect/reconnect
from the IRC channel
- Request system
information
- Download and execute
files
- Manipulate system
security settings
Users will first know that they are infected because
the computer will shut down and reboot several
times, making the computer unavailable.
If you suspect that you are infected, suspicious
files may be sent to Norman's Sandbox Center to be
checked.
Protect your computer from the latest virus threats
- get
Norman Virus Control.
For further
information, please contact
SAV25
Data Systems
|