Re: Gokar Worm?

From: Johannes B. Ullrich (jullrichat_private)
Date: Thu Dec 13 2001 - 10:40:44 PST

  • Next message: Jagh, Kevin (TGA/MLOL): "SOPHOS REPLY: RE: Gokar Worm?"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    
    For details see:
    http://www.messagelabs.com/viruseye/report.asp?id=90
    
    On Thu, 13 Dec 2001, Jeremy G Byrne wrote:
    
    > Hi All--
    > 
    > Just received a message cleaned by yahoogroups.com of
    > something their NT-based "InterScan E-Mail VirusWall"
    > product calls "WORM_GOKAR.A". The social engineering
    ...
    > The really odd thing is that I can't find any references
    > to a "Gokar Worm" on google, google's usenet mirror, or
    > on several specialist av sites I've checked. Is this a 
    > case of commercial non-disclosure?
    
    - -- 
    - -------
    jullrichat_private                    Join http://www.DShield.org
                              Distributed Intrusion Detection System
    
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    iD8DBQE8GPYvwWQP+4im9DYRAs5jAJ9ze4N6OZY/8ChfcTpR1cDkITVvlQCgpjEV
    rSZN0rSHUgEMR+eI0VHiKqA=
    =8llE
    -----END PGP SIGNATURE-----
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Dec 13 2001 - 10:48:03 PST