Full Disclosure mailing list archives
RE: Zotob Worm Remover
From: "Todd Towles" <toddtowles () brookshires com>
Date: Mon, 22 Aug 2005 10:01:07 -0500
Diabl0 will be happy to know that it just deletes the worm and not all the IRC bots that the worm drops on the computer. Oh and it doesn't delete the cutom keyloggers or backdoors or anything for that matter. Diabl0 isn't using the worm for botnet control anyways. He just created the worm from the HOD exploit. HOD is the exploit that doesn't make the machine reboot.
-----Original Message----- From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of n3td3v Sent: Sunday, August 21, 2005 7:15 PM To: full-disclosure () lists grok org uk Subject: Re: [Full-disclosure] Zotob Worm Remover On 8/21/05, Ill will <xillwillx () gmail com> wrote:Made a Zotob Worm Remover that removes the processes/files/registry entries from variants A through G. includes MASM source code.Diabl0 won't be happy that you're trying to supress his worm. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- RE: Zotob Worm Remover Todd Towles (Aug 22)
- Re: Zotob Worm Remover n3td3v (Aug 22)
- <Possible follow-ups>
- RE: Zotob Worm Remover Todd Towles (Aug 22)
- Re: Zotob Worm Remover n3td3v (Aug 22)
- Re: Zotob Worm Remover Ill will (Aug 22)
- RE: Zotob Worm Remover Ron DuFresne (Aug 22)
- RE: Zotob Worm Remover Todd Towles (Aug 22)
- RE: Zotob Worm Remover Todd Towles (Aug 22)
- RE: Zotob Worm Remover Jan Nielsen (Aug 22)
- RE: Zotob Worm Remover Aditya Deshmukh (Aug 22)
- Re: Zotob Worm Remover James Tucker (Aug 22)
- RE: Zotob Worm Remover Jan Nielsen (Aug 22)
(Thread continues...)