Name that worm--plan looks to cut through chaos

From: Imhotep (Imhotep_at_nospam.net)
Date: 09/25/05


Date: Sun, 25 Sep 2005 00:28:02 -0400


"Zotob.E, Tpbot-A, Rbot.CBQ and IRCbot.worm: all names given to a single
worm that wreaked havoc in Windows 2000 systems last month. Among the
plethora of identifiers, perhaps the most useful--CME-540--didn't make an
impact."

"But that's about to change. CME-540 was the tag attached to the worm by the
Common Malware Enumeration initiative, which is just emerging from its test
phase. Next month, the U.S. Computer Emergency Readiness Team plans to
officially take the wraps off the effort, meant to reduce the confusion
caused by the different names security companies give worms, viruses and
other pests."

http://www.linuxsecurity.com/content/view/120438

Imhotep



Relevant Pages

  • FW: Actions for the Blaster Worm - Special Edition, TechNet Flash
    ... Actions for the Blaster Worm - Special Edition, ... You are receiving this message because you are a Microsoft newsletter ... Presence of the file msblast.exe in the WINDOWS SYSTEM32 directory ... antivirus vendor and scan your machine. ...
    (Focus-Microsoft)
  • Re: Cant apply KB835732 on various Win2k systems
    ... So these machines have the Sasser worm? ... Microsoft has learned about a worm identified as "W32.Sasser.worm" that is ... Windows XP Professional ... > AnalyzePhaseOne: used 7691 ticks ...
    (microsoft.public.win2000.security)
  • Safeguard Your PC Against the Downadup Worm
    ... Safeguard Your PC Against the Downadup Worm ... How to protect your PC from the biggest worm in years. ... Security experts say it's the biggest worm attack in years, ... Windows that Microsoft Corp. patched nearly four months ago. ...
    (alt.comp.anti-virus)
  • [NEWS] A new Mass-Mailing and Backdoor Capable Worm Found in the Wild
    ... The worm uses the common auto-reply feature from an infected client to ... This directory varies with each version of Windows: ... It creates this registry entry to load the DLL file during startup: ... Message Body: Adult content!!! ...
    (Securiteam)
  • Re: Installing a MS Patch killed my computer
    ... Best bet would've been to remove the worm before trying to install the ... patch - you're trying to lock the barn door after the cows have gotten out. ... Windows XP, Windows 2000, Windows Server 2003, Windows NT ... Symptoms of the virus: Some customer may not notice any symptoms at all. ...
    (microsoft.public.win2000.security)