From: Todd Towles (toddtowlesbrookshires.com)
Date: Mon Aug 22 2005 - 10:01:07 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Diabl0 will be happy to know that it just deletes the worm and not all
the IRC bots that the worm drops on the computer. Oh and it doesn't
delete the cutom keyloggers or backdoors or anything for that matter.

Diabl0 isn't using the worm for botnet control anyways. He just created
the worm from the HOD exploit. HOD is the exploit that doesn't make the
machine reboot.

> -----Original Message-----
> From: full-disclosure-bounceslists.grok.org.uk
> [mailto:full-disclosure-bounceslists.grok.org.uk] On Behalf Of n3td3v
> Sent: Sunday, August 21, 2005 7:15 PM
> To: full-disclosurelists.grok.org.uk
> Subject: Re: [Full-disclosure] Zotob Worm Remover
>
> On 8/21/05, Ill will <xillwillxgmail.com> wrote:
> > Made a Zotob Worm Remover that removes the processes/files/registry
> > entries from variants A through G. includes MASM source code.
>
>
>
> Diabl0 won't be happy that you're trying to supress his worm.
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]