Korea's PC Users Warned of Zotob Worm
PC users have been put on their guard as variations of the Zotob worm are exploiting weak spots in the latest Windows operating system overseas. The Korea Information Security Agency (KISA) said Tuesday the Zobot worms attack a loophole in Windows’ Plug and Play (PnP) program and could hit Korea after a number of different versions were detected abroad.
The Zotob worm spreads by attacking Windows systems unprotected by the patch released on Aug. 10. When infected with Zotob worms, programs like botzor.exe, csm.exe, HAHA.EXE, and 2pac.txt are created in the “system” folder of Windows.
PnP offers automatic downloads and installation of necessary drivers when installing new hardware.