Re: SV: More info on DarkMachine

From: Nick FitzGerald (
Date: Wed Oct 17 2001 - 17:38:42 PDT

  • Next message: Can Erkin Acar: "fast ssh scans"

    <peter.kruseat_private> wrote:
    > It appears that McAfee has already posted an analysis of this virus at their
    > website. The analysis can be found at this url:
    > They have apparently entitled the virus/worm "W32/Ucon@MM" and has rated it
    > a low risk.
    If this is what I think it is, then Symantec is probably about to 
    call it "Redesi".
    Further, there is a hint it may be another Leave variant.
    I'd say for now the naming of this one is pretty up in the air...
    Nick FitzGerald
    Computer Virus Consulting Ltd.
    Ph/FAX: +64 3 3529854
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:

    This archive was generated by hypermail 2b30 : Wed Oct 17 2001 - 21:36:37 PDT