Blackworm' D-Day/Kama Sutra worm

[Onslaught7037]

I have been a supporter of Nod 32 for a long time and Iwas just wondering when Nod32 first detected this worm.

[The Hammer]

{QUOTE-> I have been a supporter of Nod 32 for a long time and Iwas just wondering when Nod32 first detected this worm. <-QUOTE}This very helpful site has a search function. http://ip2.users.whitehat.dk/server_status.php Nod may have a different name for it though.

[Onslaught7037]

Thanks for your help.

[flyrfan111]

NOD detects it as Win32/VB.NEI from the 18th of January.


NOD32 - 1.1370 20060118 / posted 11:31)Virus signature database updates:
Win32/TrojanDownloader.Sickob.B (2), Win32/VB.NEI (5)

[Marcos]

As far as I know, it was picked up by Advanced heuristics before a signature was added.

[sir_carew]

I can confirm this :-)

{QUOTE-> As far as I know, it was picked up by Advanced heuristics before a signature was added. <-QUOTE}

[dvk01]

I received some of the first copies spreading on teh 17th from 1400 onwards UK time NOD detected heuristically as unknown PE whereas many AV's didn't until samples were submitted