full-disclosure - Zotob Worm Remover

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <9E97F0997FB84D42B221B9FB203EFA27014B8F50@dc1ms2.msad.brookshires.net>
Date: Mon Aug 22 16:02:08 2005
From: toddtowles at brookshires.com (Todd Towles)
Subject: Zotob Worm Remover

Diabl0 will be happy to know that it just deletes the worm and not all
the IRC bots that the worm drops on the computer. Oh and it doesn't
delete the cutom keyloggers or backdoors or anything for that matter.

Diabl0 isn't using the worm for botnet control anyways. He just created
the worm from the HOD exploit. HOD is the exploit that doesn't make the
machine reboot.  

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk 
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of n3td3v
> Sent: Sunday, August 21, 2005 7:15 PM
> To: full-disclosure@...ts.grok.org.uk
> Subject: Re: [Full-disclosure] Zotob Worm Remover
> 
> On 8/21/05, Ill will <xillwillx@...il.com> wrote:
> > Made a Zotob Worm Remover that removes the processes/files/registry 
> > entries from variants A through G. includes MASM source code.
> 
> 
> 
> Diabl0 won't be happy that you're trying to supress his worm.
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>