Virus and Security News

Zotob Worm August 2005

W32.Zotob.E is a worm that opens a back door and exploits the Microsoft Windows Plug and Play Buffer Overflow Vulnerability (described in Microsoft Security Bulletin MS05-039) on TCP port 445.

• It has been reported that computers targeted by W32.Zotob.E may become unstable during execution of the exploit code. This may result in the termination of the services.exe process, which causes the targeted computer to shutdown.

• Virus definitions version 70816y (extended version 8/16/2005 rev. 25) or greater are required to detect this risk.

• Customers running Norton Internet Security 2005 AntiSpyware Edition and Symantec AntiVirus Corporate Edition 10.x can make use of the product's remediation functionality to remove this risk.

• While computers running Windows 95/98/Me/NT4/XP operating systems cannot be infected remotely, it is possible they could be infected if W32.Zotob.E is executed locally (although this is an unlikely occurrence). Vulnerable Windows 2000 computers could then be infected by the compromised computer.

Remember the Blaster, Welchia, and SoBig?
 

Remember the Blaster, Welchia, and SoBig!  Microsoft warned us as much as a month before that these were issues that needed to be addressed.  Millions of computer users in large and small businesses and consumers alike, ignored these warnings allowing the viruses to disrupt email and the Internet.  In fact, many companies were literally shut down for hours or days costing millions of dollars in lost productivity and revenues.

At PC On Call, none of our managed IT Partners were impacted because of our proactive approach to systems management.  We can do the same for you whether you are a larger company with 100s of computers, a small business with 5 computers or a home user with 1 or 2 PCs.

Click here to learn more or to schedule an appointment to make sure you are safe from the next virus and be sure to ask about our virtual help desk that allows us to help you with your computer issues remotely.

For more information call 1-888-PCONCALL