USNCVA - Now Read This

NOW READ THIS
("Security Advisory")

Go Back

Submitted by: Bill Hickey
NCVA List Master

NRT-0270 New BotNet Worm Variant REpackages Itself Into Existing Zip Files:

A new variant of a botnet worm repackages itself into existing zip files, according to UK-based Sophos. The worm, W32/Rbot-GSN, contains the zombie functionality of a typical botnet - spreading via removable shared drives and network shares and turning an infected computer into a zombie machine - but the worm can also repackage itself into existing zip files with a random filename and a file extension of gif, followed by many blank spaces, then the real file extension of scr, using an internal zip engine.

(sophos.com 01AUG07)

Last Modified: Tuesday, 07-Aug-2007 21:02:52 EDT

NOW READ THIS ("Security Advisory")

NRT-0270 New BotNet Worm Variant REpackages Itself Into Existing Zip Files:

NOW READ THIS
("Security Advisory")