and started to turn off my intarweb... then I realized that the NPR I was listening to and TWW were on teh intarweb... guess I'm fucked.

8/17/2005 2:39:54 PM

yeah, we've been slammed because of Zotob all day.

it hit us too, and our voicemail was down for a little while.

8/17/2005 3:22:11 PM

I heard on the news that it doesn't affect Windows XP. Can anyone confirm this?

8/17/2005 3:30:06 PM

i heard windows 2000

nothing about xp though

8/17/2005 3:30:55 PM

I bet google knows the answer.

8/17/2005 3:32:06 PM

So the storm wiped out my router a week ago and I am connected directly to the modem and have no virus scanning on the machine I am currently using, a W2k box. Should I be scared?

8/17/2005 3:38:33 PM

update windows machines.

8/17/2005 4:56:35 PM

yeah i heard it only affects W2K.

8/17/2005 6:16:09 PM

8/17/2005 9:46:10 PM

yes, it'll only propagate to windows 2000 or non-commonly configured XP SP2/2003 installs.

(edit, adding more info now that my girlfriend left)
the vulnerability does exist on xp/2003, but the fairly trivial exploit code in the wild doesn't work on them due to low level configuration changes made in SP2 and 2003. It's very possible that in the near future more sophisticated exploits will affect XP/2003 installations (or that non-publicly-available exploit code that does work is already being used). specifics at http://isc.sans.org/diary.php?date=2005-08-15 in the "Zotob affecting some XP SP2/2003?" section.

removal tool: http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.removal.tool.html

to keep up with the latest developments: http://isc.sans.org/

[Edited on August 17, 2005 at 11:11 PM. Reason : ]

8/17/2005 10:45:41 PM

patch available here
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

8/18/2005 2:17:53 PM