W32.Zotob.J@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: August 23, 2005
Updated: August 23, 2005 9:55:19 PM
Infection Length: 114,384 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

W32.Zotob.J@mm is a mass-mailing worm that opens a back door and exploits the Microsoft Windows Plug and Play Buffer Overflow Vulnerability (BID 14513) on TCP port 445.

Protection

  • Initial Rapid Release version August 23, 2005
  • Latest Rapid Release version August 2, 2008 revision 020
  • Initial Daily Certified version August 23, 2005
  • Latest Daily Certified version January 20, 2009 revision 048
  • Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Writeup By: John Canavan
Search by name
Example: W32.Beagle.AG@mm
Learn more about Zero-Day / Operation Aurora / Hydraq
Symantec DeepSight Screensaver