Elizabeth Schwartz wrote:
Just wondering if anyone knew whether Worm.Mytob.CL is the same as the
worm the media is calling Zotob(zotob.a or zotob.b) ? Circumstantial
evidence points that way but I don't have any samples to play with.
I've searched the usual sites with nothing conclusive either way...


Zotob-A, see http://lurker.clamav.net/message/20050814.215255.66cd6ac2.en.html

Zotob-B is detected as <Worm.Mytob.T-2>.

I've not studied Zotob-C, so I can't say if or maybe what this variant is detected as.

Best regards,
Diego d'Ambra
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to