[Dshield] F-Secure Radar2 Alert

Tom dshield at oitc.com
Fri Jan 20 18:52:52 GMT 2006


At 1:23 PM -0500 1/20/06, Mark Tombaugh wrote:
>On Fri, 2006-01-20 at 12:16 -0500, Paul Marsh wrote:
>>  I saw a few of these yesterday, Trend calls it Grew..  Nothing so 
>>far today, are others seeing it?
>>
>>  Thanx, Paul
>
>Looks like this is a new one Paul, at least from the wording at
>F-Secure:
>
>"It is similar to the 'Email-Worm.Win32.VB.bi' that was found a few days
>ago."
>
>Email-Worm.Win32.VB.bi = VB-8 (Clam) = Nyxem-D (Sophos)
>
>Anyone have a sample? (of the new one) I'd like to check if the sigs for
>Nyxem-D at bleedingsnort also hit on this one. tia,
>
>PS - we so need a working cme...

ClamAV VB-9 which I believe is the new one coming off list

Tom
-- 

Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/
US Phone Numbers: 321-984-3714, 321-729-6258(fax), 
321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw at mac.com
skype: trshaw


More information about the list mailing list