Re: SV: More info on DarkMachine

From: Nick FitzGerald (nick@virus-l.demon.co.uk)
Date: Wed Oct 17 2001 - 17:38:42 PDT

  • Next message: Can Erkin Acar: "fast ssh scans"

    <peter.kruseat_private> wrote:
    
    > It appears that McAfee has already posted an analysis of this virus at their
    > website. The analysis can be found at this url:
    > http://vil.mcafee.com/dispVirus.asp?virus_k=99225&
    > 
    > They have apparently entitled the virus/worm "W32/Ucon@MM" and has rated it
    > a low risk.
    
    If this is what I think it is, then Symantec is probably about to 
    call it "Redesi".
    
    Further, there is a hint it may be another Leave variant.
    
    I'd say for now the naming of this one is pretty up in the air...
    
    
    -- 
    Nick FitzGerald
    Computer Virus Consulting Ltd.
    Ph/FAX: +64 3 3529854
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Oct 17 2001 - 21:36:37 PDT