Elizabeth Schwartz wrote:
Just wondering if anyone knew whether Worm.Mytob.CL is the same as the
worm the media is calling Zotob(zotob.a or zotob.b) ? Circumstantial
evidence points that way but I don't have any samples to play with.
I've searched the usual sites with nothing conclusive either way...
Zotob-A, see
http://lurker.clamav.net/message/20050814.215255.66cd6ac2.en.html
Zotob-B is detected as <Worm.Mytob.T-2>.
I've not studied Zotob-C, so I can't say if or maybe what this variant
is detected as.
Best regards,
Diego d'Ambra
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html