Combating W32.Zotob.E and W32.Esbot.A

Overview

W32.Zotob.E and W32.Esbot.A are new worms that exploit a Microsoft vulnerability (MS05-039) announced last on August 9, 2005. These worms are the most significant of a series of threats targeting unpatched Windows systems, primarily Windows 2000. There has been widespread impact noted across the Internet and inside both large and small organizations. W32.Zotob.E and W32.Esbot.A are both network-based worms that exploit the Microsoft Windows Plug and Play Buffer Overflow Vulnerability in an attempt to compromise hosts and spread to new systems.