Zotob.b may be affecting some XP SP2/2003 installs
As I noted yesterday, virii typically get updated and improved. Yesterdays reports about the zotob virus noted that Windows Xp service pack 2 and Windows 2003 were not affected by the new worm. Today however, the sans institute is reporting that zotob may be affecting some XP sp2 and 2003 installs. It appears that it uses something called NULL sessions.
Null sessions are disabled by default on XP SP2 and 2003, but under some server scenarios they may have been enabled.
Additionaly some antivirus vendors are claiming that Windows 95/98/ME and NT might be able to spread the worm but not be infected by it. (?So I guess the code runs on the platform but doesn’t infect it remotely.?)