Security Incidents mailing list archives

Re: SV: More info on DarkMachine


From: "Nick FitzGerald" <nick () virus-l demon co uk>
Date: Thu, 18 Oct 2001 12:38:42 +1200

<peter.kruse () it dk> wrote:

It appears that McAfee has already posted an analysis of this virus at their
website. The analysis can be found at this url:
http://vil.mcafee.com/dispVirus.asp?virus_k=99225&;

They have apparently entitled the virus/worm "W32/Ucon@MM" and has rated it
a low risk.

If this is what I think it is, then Symantec is probably about to 
call it "Redesi".

Further, there is a hint it may be another Leave variant.

I'd say for now the naming of this one is pretty up in the air...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: