Zotob Removal Tools

The Zotob worm has morphed into several variants in the past few days. They all have similar traits, affecting Windows 2000 mainly (and it appears that WinXP SP2 is immune) and using an IRC server as a C&C server. If you have to clean up this mess, there are a couple of tools now available for you to use.

Microsoft has updated their malware removal tool to remove several variants of the new Zotob worm. This is an emergency update to their frequently updated malware removal tool, so if you downloaded the one for August last week, you need to update.

In addition to that tool, Symantec has released a similar tool. The Symantec Zotob Removal Tool can be downloaded for free and claims to detect and delete several variants of the worm.

PS: Really, I promise I'm still on vacation!