question about zobot worm

[wakemeupwhenitsover]

I think that's what it's called. Anyhoo, I read about this at PCWorld. They said only W2000 is affected (that's me) but only the Plug & Play & only if you have an 'open port 445'. The only thing I know is that I have W2000pro. The rest is beyond me. Is there a way to check?

I hate downloading crap from microsoft. It takes forever & I have to open IE. (I guess I have to open IE, I can never get jack when I use Netscape.)

I use Spybot Search & Destroy, Adaware, Norton, AVG, & Zonealarm Pro. I also use Netscape for the browser & Outlook (not Outlook Express) for email. Am I vulnerable to any of this?

best & sorry I'm such a techno idiot.

[displacedtexan]

1. According to the Tech Guru, yes. You're vulnerable.

I posted info on this in today's Blog Box on the DU homepage.

According to the Tech Guru, "Zotob is a worm that is spread through a flaw in Windows Plug and Play Buffer Overflow." OK. Whatever. For those of us on Planet I Don't Care How It Works As Long As It Works, the guru also notes that the Zotob worm can run on most Microsoft platforms, not just Windows 2000 - so don't think you're safe, MS users! - and suggests you visit Microsoft Security and download the patch.

http://tech-guru.blogspot.com/2005/08/worm-alert-zotob.html

[wakemeupwhenitsover]

2. thanks for the help & wish me luck! :) n/t

[wakemeupwhenitsover]

4. *&^*(%H!

God, I hate microcrap. I went over to download it & sure enough, I can't download using Netscape. So, I dig out ie which is sooooo sloooow. Download the *&^%%(), & up pops a error message that I can't download the patch until I download service pack 4. Finally, finally find service pack 4 & up pops a whole list of 'issues' (don't you just love microcrap? there are 'issues' with their service pack that, if I'm not mistaken, are not supposed to add more problems.)

Like Scarlett O'Hara, I'll just think about this tomorrow.

best

[canetoad]

3. Two types of plug and play

I think (may be wrong) that the vulnerability is in Universal P n P
a description of which is here http://en.wikipedia.org/wiki/Universal_plug-and-play

This is different to ordinary PnP (for mice, printers etc). It's a good practice to disable UPnP in services.