Discovered: August 23, 2005
Updated: August 23, 2005 9:55:19 PM
Infection Length: 114,384 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Zotob.J@mm is a mass-mailing worm that opens a back door and exploits the Microsoft Windows Plug and Play Buffer Overflow Vulnerability (BID 14513) on TCP port 445.
Protection
-
Initial Rapid Release version August 23, 2005
-
Latest Rapid Release version August 2, 2008 revision 020
-
Initial Daily Certified version August 23, 2005
-
Latest Daily Certified version January 20, 2009 revision 048
-
Initial Weekly Certified release date pending
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: John Canavan